aedating and vbulletin

[tanhadil]

i guess thier script doesnt work with vbulletin?

http://aedating.aewebworks.com/forum....php?p=622#622

could it be (chdir("/var/www/vitka/forum"))???

here is the mod for vb from aedating

INSERT INTO `Modules` VALUES (5, 'vbull', 'global $mods;\r\n\r\n# wide attributes\r\n\r\n# vbull specific attributes\r\n\r\n$mods[\'vbull\'][\'db_host\'] = \'localhost\';\r\n\r\n\r\n$mods[\'vbull\'][\'db_name\'] = \'vbulletin\';\r\n$mods[\'vbull\'][\'db_user\'] = \'root\';\r\n$mods[\'vbull\'][\'db_pwd\'] = \'\';\r\n\r\n', 'global $mods;\r\n\r\nif (chdir("/var/www/forum"))\r\nexec("/usr/local/bin/php -q vbregister.php $NickName $Password $Email");\r\n\r\n', 'global $mods;\r\n\r\n$my = mysql_connect ($mods[\'vbull\'][\'db_host\'], $mods[\'vbull\'][\'db_user\'], $mods[\'vbull\'][\'db_pwd\'] );\r\nif (!$my) modules_err("vbull_del connect error\\n\\n".mysql_error($my));\r\n\r\nmysql_selec t_db ($mods[\'vbull\'][\'db_name\'], $my) or modules_err("vbull_del\\n\\n".mysql_error($my));\r \n\r\n$vb_id = mysql_query("SELECT userid FROM user WHERE\r\n`username` = \'$NickName\'", $my) or modules_err("vbull_del\\n\\n".mysql_error($my));\r \n\r\nmysql_query("DELETE FROM user WHERE\r\n`userid` = \'$vb_id\'", $my) or modules_err("vbull_del\\n\\n".mysql_error($my));\r \nmysql_query("DELETE FROM usertextfield WHERE\r\n`userid` = \'$vb_id\'", $my) or modules_err("vbull_del\\n\\n".mysql_error($my));\r \nmysql_query("DELETE FROM userfield WHERE\r\n`userid` = \'$vb_id\'", $my) or modules_err("vbull_del\\n\\n".mysql_error($my));\r \nmysql_query("DELETE FROM passwordhistory WHERE\r\n`userid` = \'$vb_id\'", $my) or modules_err("vbull_del\\n\\n".mysql_error($my));\r \n\r\nmysql_close($my);', 'global $mods;\r\n\r\n$my = mysql_connect ($mods[\'vbull\'][\'db_host\'], $mods[\'vbull\'][\'db_user\'], $mods[\'vbull\'][\'db_pwd\'] );\r\nif (!$my) modules_err("vbull_upd connect error\\n\\n".mysql_error());\r\n\r\nmysql_select_d b ($mods[\'vbull\'][\'db_name\'], $my) or modules_err("vbull_upd\\n\\n".mysql_error($my));\r \n\r\n$salt = \'\';\r\nfor ($i = 0; $i < 3; $i++)\r\n{\r\n $salt .= addslashes(chr(rand(32, 126)));\r\n}\r\n$timenow = time();\r\n$pass = addslashes(md5(md5(\'$Password\') . $salt));\r\n\r\n$sql="\r\nUPDATE user SET\r\n`username` = \'$NickName\',\r\n`user_email` = \'$Email\',\r\n`user_password` = MD5(\'$Password\')\r\nWHERE\r\n`userid`= $max_id,\r\n`username` = \'$NickName\',\r\n`salt` = \'$salt\',\r\n`password` = \'$pass\',\r\n`passworddate` = $timenow,\r\n`email` = \'$Email\',\r\n`parentemail` = \'\', \r\n`showvbcode` = 1, \r\n`usertitle` = \'Junior Member\',\r\n`joindate` = $timenow, \r\n`daysprune` = 0, \r\n`lastvisit` = $timenow, \r\n`lastactivity` = $timenow, \r\n`usergroupid` = 2, \r\n`timezoneoffset` = \'0\', \r\n`options` = 3415, \r\n`maxposts` = -1, \r\n`threadedmode` = 0, \r\n`startofweek` = 1, \r\n`ipaddress` = \'127.0.0.1\', \r\n`pmpopup` = 0, \r\n`referrerid` = 0, \r\n`reputationlevelid` = 5, \r\n`reputation` = 10, \r\n`autosubscribe` = -1, \r\n`birthday` = \'\', \r\n`birthday_search` = \'0000-00-00\'";\r\n\r\nmysql_query($sql, $my) or modules_err("vbull_upd\\n\\n$sql\\n\\n".mysql_erro r($my));\r\n\r\nmysql_close($my);', '', 'reg', '', 'forum');

[BamaStangGuy]

Wrong Forum

[Marco van Herwaarden]

I don't know what modification they are running, i suggest you ask at their forum.

[gembels]

PHP Code:

global $mods;

if (chdir("/home/public_html/aedating/forum"))
exec("/usr/local/bin/php -q vbregister.php $NickName $Password $Email"); 


izzit true ? what exec can do ? can use fopen.. how to ? anyone help ? couz on database "Profiles" is tables for aedating "user" for vbulletin.. they use ecex command for integrated.. anyone can help us ?