Event attendance

Request by: DaveLogic

With this hack when you create an event you can give the users an option to "register" to the event. Then you can view which people have registered to that event.

This could be used so you create an event and then other people notify that they will be attending to the event. You can then keep track of all the people that would be attending each event.

Info for hackers:
You may modify, improve, upgrade, redistribute this hack, include it
in another hack or yours or translate it provided you do it free of
charge and you distribute it in www.vbulletin.org at least, there is no
need to pm me asking for permission
Some portions of the code are (c) Jelsoft Enterprises Ltd.

[Benj]

i might try later : bored ill let you know

[Oblivion Knight]

Originally Posted by Pseudomizer

I found out how they bypass our check for userid. They open 2 windows as a user who is not attending the event and sees the link "i want to attend to this event". Then he goes to the second window and logs out of the forum. The cookie is cleared. Then he goes back and clicks the link in the first window which is still there and oleeeeeeeee oleeeeeeeeee you have the user "unregistered user" attend the event. :-(

I also experienced this issue recently, I did the following..

In calendar.php, find:

	if ($_REQUEST['do'] == "attend")
	{
		$roll[$bbuserinfo['userid']] = $bbuserinfo['username'];	
	}
	else
	{
		unset($roll[$bbuserinfo['userid']]);	
	}

Replace it with:

	if ($_REQUEST['do'] == "attend")
	{
		if ($bbuserinfo[userid])
		{
			$roll[$bbuserinfo['userid']] = $bbuserinfo['username'];
		} else {
			print_no_permission();
		}	
	}
	else
	{
		if ($bbuserinfo[userid])
		{
			unset($roll[$bbuserinfo['userid']]);
		} else {
			print_no_permission();
		}	
	}

It seems to have worked, as I can no longer replicate the bug..


P.S This mod works flawlessly in 3.0.5.

[ricker]

it seems to be working fine on 3.0.5
awesome hack, everyone loves it.

[ryancooper]

Everything seems to work except when i try to add myself to a event i get :"

Invalid Event specified. If you followed a valid link, please notify the webmaster

Now hte strange part . . . IT WORKS It adds my name to the list and removs it when i click remove.

Any Help. . . I would love to get this up and running.

[SamirDarji]

Originally Posted by ryancooper

Everything seems to work except when i try to add myself to a event i get :"

Invalid Event specified. If you followed a valid link, please notify the webmaster

Now hte strange part . . . IT WORKS It adds my name to the list and removs it when i click remove.


Any Help. . . I would love to get this up and running.

Check your code changes. Something doesn't sound like it got changed correctly.

[SamirDarji]

Originally Posted by Oblivion Knight

I also experienced this issue recently, I did the following..

In calendar.php, find:

	if ($_REQUEST['do'] == "attend")
	{
		$roll[$bbuserinfo['userid']] = $bbuserinfo['username'];	
	}
	else
	{
		unset($roll[$bbuserinfo['userid']]);	
	}

Replace it with:

	if ($_REQUEST['do'] == "attend")
	{
		if ($bbuserinfo[userid])
		{
			$roll[$bbuserinfo['userid']] = $bbuserinfo['username'];
		} else {
			print_no_permission();
		}	
	}
	else
	{
		if ($bbuserinfo[userid])
		{
			unset($roll[$bbuserinfo['userid']]);
		} else {
			print_no_permission();
		}	
	}

It seems to have worked, as I can no longer replicate the bug..


P.S This mod works flawlessly in 3.0.5.

Here's a simpler solution: https://vborg.vbsupport.ru/showthrea...1&postcount=73

[Oblivion Knight]

Originally Posted by SamirDarji

Here's a simpler solution: https://vborg.vbsupport.ru/showthrea...1&postcount=73

As mentioned earlier in this thread, it is possible to bypass your fix..

"I found out how they bypass our check for userid. They open 2 windows as a user who is not attending the event and sees the link "i want to attend to this event". Then he goes to the second window and logs out of the forum. The cookie is cleared. Then he goes back and clicks the link in the first window which is still there and oleeeeeeeee oleeeeeeeeee you have the user "unregistered user" attend the event. :-("

[SamirDarji]

Originally Posted by Oblivion Knight

As mentioned earlier in this thread, it is possible to bypass your fix..

"I found out how they bypass our check for userid. They open 2 windows as a user who is not attending the event and sees the link "i want to attend to this event". Then he goes to the second window and logs out of the forum. The cookie is cleared. Then he goes back and clicks the link in the first window which is still there and oleeeeeeeee oleeeeeeeeee you have the user "unregistered user" attend the event. :-("

Oh yeah, I forgot about that method. I've only seen it happen once, so I didn't pay much mind to it. I'll be adding your revised code to my setup. Thank you!

[alkatraz]

Great hack, installed on 3.03
thank you!!!

[TBSVTOA]

My admin CP tell me You are not authorized to execute SQL queries.

Anyone have any idea's