Moderators Functions - vbAccessDenied

Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (Thanks to alluidh)

Features:

• Fully Phrased.
• Turn on or off in admin cp.
• Created a custom message for any vBulletin generic access denied message.
• Personalize messages with any user, forum or usergroup information.
• Automatically send a PM to one or more users the first time a member receives a specific access denied message.
• Personalize the PM with any user, forum or usergroup information.
• Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
• Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
• Several layers of security.

Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install

1. Download the vbAccessDenied_1.0.zip file.
2. Unzip and upload the files in the upload directory to your forum root.
3. Import the product file in your admincp.
4. Create custom messages as desired.

1.1 Changes

1. Supports bbcodes in messages (see updated screen shot).
2. Fixed sql bug that prevented many messages from showing properly.
3. Removed 255 character limit on messages.

Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

[scottct1]

Here is what I am seeing...

The before is in the admin panel using the big editor.

The after is the message folks are actually seeing...

Thanks for your help!

[scottct1]

Originally Posted by hambil

Try creating the message using the WYSIWYG editor, when switching to the standard editor (button in the top right of the editor will do that). Then copy and pasting the message into vbAccessDenied. That should work.

Tried that, no go, the BB Code displays correctly in the admin control panel (see picture 1)

However when the message is displayed to the user its all garbled up as seen in the second picture.

Thanks again!

[scottct1]

Ok I got it...

I had to use HTML instead of BBcodes and it all worked fine. The error messages now properly display.

Thanks again!

[hambil]

Originally Posted by scottct1

Ok I got it...

I had to use HTML instead of BBcodes and it all worked fine. The error messages now properly display.

Thanks again!

The bbcode parser somehow didn't make it into the product file. Ack! I've updated the product file, and doing an install with allow overwrite should enable bbcode with no harm done. Though you may need to change the html back to bbcode afterwards, I'm not sure.

[Xplorer4x4]

PHP Code:

Database error in vBulletin 3.5.4:

Invalid SQL:

    SELECT * FROM accessdenied_message
    WHERE usergroupid = 1
    AND forumid =
    AND (script = 'private(*)' OR script = '*');

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'private(*)' OR script = '*')' at line 4
Error Number : 1064
Date         : Friday, April 7th 2006 @ 10:05:28 AM
Script       : http://www.domsforums.net/private.php
Referrer     :
IP Address   :
Username     : Unregistered
Classname    : vb_database 


I got this trying to send a PM as a user waiting email conformation. It says unregistered but I was infact registered.

[hambil]

Originally Posted by Xplorer4x4

PHP Code:

Database error in vBulletin 3.5.4:

Invalid SQL:

    SELECT * FROM accessdenied_message
    WHERE usergroupid = 1
    AND forumid =
    AND (script = 'private(*)' OR script = '*');

MySQL Error  : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'private(*)' OR script = '*')' at line 4
Error Number : 1064
Date         : Friday, April 7th 2006 @ 10:05:28 AM
Script       : http://www.domsforums.net/private.php
Referrer     :
IP Address   :
Username     : Unregistered
Classname    : vb_database 


I got this trying to send a PM as a user waiting email conformation. It says unregistered but I was infact registered.

Make sure you'd downloaded and installed the lastest zip. This problem was fixed a while back.

[hambil]

I'm taking this off Beta. It hasn't had any complaints or bugs in a while

[computer1]

I have install this nowe and markt the forum movies to the moderator group
but when I login to the forum whit normal user I can se and write to that section movies howe can I fix this??.

Can I use admin group I cant finde that groupe ???
here is the link to that section
http://forum.wrestlingsidan.se/showt...?p=644#post644

I dont nowe where is the wrong whit this

[hambil]

Originally Posted by computer1

I have install this nowe and markt the forum movies to the moderator group
but when I login to the forum whit normal user I can se and write to that section movies

You mark it to the group you want to get the message. So, if you want normal users to get the message then deny them posting access to the forum (in forum settings) and then mark the access denied message as "movies" forum and "normal" usersgroup (whatever your normal usergroup and movies forum is called).

[MissKalunji]

is it possible to use that to block access to example download section? its not in a forum but its apart of vb?