I don't know, because I don't use 3.7. Try it and see if it will work?
Quote:
Originally Posted by citroenar
Great, some members logout and create new account.no more.
This won't stop them logging out and creating a new account. You need the "Multiple Account Registration Prevention" product to do that.
My mod is more focussed on stopping them using guest access as a second account.
Quote:
Originally Posted by codershark
But what happens when they empty his browser cache (incl. cookies) ????
It will stop working if they clear their cookies, obviously.
Thing is, most people only clear their cookies rarely, if ever.
Most internet users don't know about cookies. So this system will work on them.
Stopping someone who knows about cookies, IPs, proxies, etc from evading bans or limits on your website requires installing a bunch of different security mods to block multiple account creation, multiple account use, proxy use, and a bunch of other things. Even then, they may still be able to do it if they really know what they are doing.
My product here is not intended to be a comprehensive security solution, it is intended to be *one* tool that you *can* use as part of a wider system. Like the Linux/UNIX philosophy... one small, but efficient, powerful and widely compatible, tool for each job.
Thanks a lot..marking installed for right now and will install soon. Any errors for anyone yet?
It would be incredibly nice if you could set which usergroups use this and which don't. I would like my regular users to be able to log out just not my banned ones.
It would be incredibly nice if you could set which usergroups use this and which don't. I would like my regular users to be able to log out just not my banned ones.
Try editing the product file, replacing:
Code:
if (!isset($_COOKIE['NGBaccess'])) {
// we do NOT use vbsetcookie, because cookies set with vbsetcookie() are erased when the user logs out!
setcookie("NGBaccess", "yes", time()+31104000, "/");
}
with:
Code:
if (
!isset($_COOKIE['NGBaccess']) AND
!($vbulletin->userinfo['permissions']['genericoptions'] &
$vbulletin->bf_ugp_genericoptions['isnotbannedgroup'])
) {
// we do NOT use vbsetcookie, because cookies set with vbsetcookie() are erased when the user logs out!
setcookie("NGBaccess", "yes", time()+31104000, "/");
}
That *might* get the result you want, assuming the code is good and you've set all your banned groups to "is not a banned group: false" in your usergroup options.
If you haven't, you might try this :
Code:
if (
!isset($_COOKIE['NGBaccess']) AND
in_array($bbuserinfo['usergroupid'], array(8,9,10))
) {
// we do NOT use vbsetcookie, because cookies set with vbsetcookie() are erased when the user logs out!
setcookie("NGBaccess", "yes", time()+31104000, "/");
}
Where : "8,9,10" is a comma-separated list of the groups you want this to apply to. Don't actually use 8,9 and 10 unless these really are your banned groups
Please let me know if the isnotbannedgroup code above works If it does, I might consider releasing an update to this hack which lets you choose whether to apply it to all registered members, banned members, or an admin-supplied list of group ids.
what happens to users who log in via net cafe and want to log out but they wont be able to do so , it risks the security of their account doesnt it ? maybe it whould be good if it was per usegroup (for banned and COPPA users)
what happens to users who log in via net cafe and want to log out but they wont be able to do so , it risks the security of their account doesnt it ? maybe it whould be good if it was per usegroup (for banned and COPPA users)
Please read the modification description.
This mod does not stop registered users logging out, it just stops them from being able to read the forums while logged out. The purpose is not to prevent members logging out entirely, but rather, to prevent members logging out in order to bypass restrictions which apply to them when they are logged in.