Administrative and Maintenance Tools - KX - Rename Config File

This modification was brought to you by
KXDesign

http://www.kxdesign.com/

~Modification name
Rename Config File

~Modification description
This modification allows you to rename or move the config.php file.This is to protect your sensible information and increase the security of your vBulletin board.

The majority of boards get hacked because a hacker uploads a malicious script to get hold of the config.php content.But if you move or rename it,there is no chance that they find out the location of it.

Tips & Tricks:

vBSEO - https://vborg.vbsupport.ru/showpost....1&postcount=24
Fool Hackers - https://vborg.vbsupport.ru/showpost....8&postcount=23

~Modification options
None

~Modification info
File uploads: 0
File edits: 1
Templates: 0
Template edits: 0
Plugins: 0
SQL Queries: 0
Phrases: 0
Settings: 0
Hooks: 0

Install time: 1 minute
Install level: Light

~Modification installation

Step 1: Open includes/class_core.php and find:

include(CWD . '/includes/config.php');

		if (sizeof($config) == 0)
		{
			if (file_exists(CWD. '/includes/config.php'))
			{
				// config.php exists, but does not define $config
				die('<br /><br /><strong>Configuration</strong>: includes/config.php exists, but is not in the 3.6+ format. Please convert your config file via the new config.php.new.');
			}
			else
			{
				die('<br /><br /><strong>Configuration</strong>: includes/config.php does not exist. Please fill out the data in config.php.new and rename it to config.php');
			}
		}

And replace it with:

include(CWD . 'XXXXX');

		if (sizeof($config) == 0)
		{
			if (file_exists(CWD. 'XXXXX'))
			{
				// config.php exists, but does not define $config
				die('<br /><br /><strong>Configuration</strong>: includes/config.php exists, but is not in the 3.6+ format. Please convert your config file via the new config.php.new.');
			}
			else
			{
				die('<br /><br /><strong>Configuration</strong>: includes/config.php does not exist. Please fill out the data in config.php.new and rename it to config.php');
			}
		}

Where XXXXX is the relative path to your new config file.It can be, for instance:
admincp/mynewconfig.php or includes/configuration.php .

~Modification screenshots
None


~Modification changelog

• 1.0.0 - First Release

~Modification copyright
This may not be distributed,released or claimed as your work without author's permission.

[RL714]

if you guy think that hacker would easy to hack into vbulletin files, so i think vbulletin wont live and growing well as now, dont you think ?

[Devanand]

Not working here, I am also geting error. I did everything you said, file is in VB root but still nothing.

[luan7749]

If I'm hacker who had a 'shell' in your server, I'll view source of file class_core.php to find real path of config file. So what ?

[Protoman]

mod posted without permission from previous authors

[Ziki]

Well in that case the previous author would have to be my father as this was written from scratch . And there's really not much about this mod, it would be like giving instructions to changing the background color of your site and claiming copyright for it

[TheInsaneManiac]

Originally Posted by linhhon2003

If Hacker read files class_core will know the path of the new config files???

If they can read the config.php somehow, don't you think they could read other files? That's why my config.php is encrypted.

[TheLastSuperman]

Originally Posted by michi123

ye, cuz ur out of your forums folder! the folder has to be in your forums folder!

if sumone is using vbseo, uve to change the config path in config_vbseo.php too!

search

define('VBSEO_VB_CONFIG',              'config.php');

replace with

define('VBSEO_VB_CONFIG',              '../folder/newconfig.php');

important is the .. !

This renaming will work just fine with vBulletin 4.0 and for vBSEO 3.5 RC2 you need to modify the config.xml file located here:

PHP Code:

www.yoursite.com/forum/vbseo/resources/xml/config.xml 


Differently then you see in the quote above since the config file is now an xml file .

Change the following lines and replace the newfolderlocation and newconfigname.php with your new folder and file names

PHP Code:

<setting>
<name>VBSEO_VB_CONFIG</name>
<value><![CDATA[../newfolderlocation/newconfigname.php]]></value>
</setting> 


Then upload the config.xml file back to your server and no more errors from vBSEO .

Enjoy!

Mike

[legacy123]

This would go great with the old .htaccess

PHP Code:

<Files config.php> 
deny from all
</Files>