Moderators Functions - vbAccessDenied

Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (Thanks to alluidh)

Features:

• Fully Phrased.
• Turn on or off in admin cp.
• Created a custom message for any vBulletin generic access denied message.
• Personalize messages with any user, forum or usergroup information.
• Automatically send a PM to one or more users the first time a member receives a specific access denied message.
• Personalize the PM with any user, forum or usergroup information.
• Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
• Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
• Several layers of security.

Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install

1. Download the vbAccessDenied_1.0.zip file.
2. Unzip and upload the files in the upload directory to your forum root.
3. Import the product file in your admincp.
4. Create custom messages as desired.

1.1 Changes

1. Supports bbcodes in messages (see updated screen shot).
2. Fixed sql bug that prevented many messages from showing properly.
3. Removed 255 character limit on messages.

Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

[kurtbarker]

i'll keep my eye out for it... thanks

[Ambie]

This is nice. Thank you! One problem though. When I get the pm, and go to click on the approve link, I am getting this message.

This action can only be done through a vbAccessDenied approval pm.

[hambil]

It's a security feature. There are two ways to get that message. 1) No pm was sent (or it didnt' get recorded in the database for some reason). 2) The person clicking the approve link is not one of the people the pm was sent too.

[kafi]

hambil thank you for this fantastic hack, I always had problems with generic alerts...

One suggestion though .-) I have pretty much sub-forums and would like to have inheriting message function (according to my testing id doesnt work). I mean that sub-forum will inherit the message from parent forum (if I tick it on) - the same way it inherit permissions...

Is this something possible/interesting for you to do? Please let me know, if not I will do this manually for all my forums (I have about 100 subforums - about third of them permissioned).

Installed - great hack .-)

[hambil]

Originally Posted by kafi

hambil thank you for this fantastic hack, I always had problems with generic alerts...

One suggestion though .-) I have pretty much sub-forums and would like to have inheriting message function (according to my testing id doesnt work). I mean that sub-forum will inherit the message from parent forum (if I tick it on) - the same way it inherit permissions...

Is this something possible/interesting for you to do? Please let me know, if not I will do this manually for all my forums (I have about 100 subforums - about third of them permissioned).

Installed - great hack .-)

That's interesting. And I think it's probably pretty easily doable. I'll add it into the 3.6 update this week.

[kafi]

Great news hambil, you made me happy today :-)

I found that it might be even more handy to have inheritions if it come to use also your per-script function within settings.

[kafi]

humbil, if you want to add PM title to phrases it will be great: $pmdm->set('title', 'vbAccessDenied PM from ' . $vbulletin->userinfo['username']);
I have translated for myself in plugin.

[kafi]

hambil me again :-)

I am not sure that I understand the flow of the PM.

PM is sent automatically although I do not know wheter the user will want to join the usergroup or not and therefor I do not know wheter to approve him.

My model situation:
I have an article forum where shouldnt be posted any questions or so - just articles. I have set up alert-message saying that he has not right to post in article forum and asking him wheter he is serious about adding new article or not...
1. Lets say he is not and I am getting request PM from him to join automatically ( I do not know wheter he is serious or not) ...yes I can disable PM, but I like the automated PM-request and therefor I would add sort of confirmation of the request from the users side (either link in PM sended to user asking him wheter he is serious about adding new article and want to join author group, or maybe direct link in alert-message where he may apply to join author group).

hmm is it possible/interesting for you to do? I have disabled currently autoPM request for the time being.

[hambil]

Yeah, I'm not sure I fully understand. Making the pm title so it is configurable is no problem, and a good idea. The other part you talk about I'll need to understand better...

[kafi]

sorry sometimes I am lost in expressing things in englis :-)))

Current situation:
- if I want to automate process of approving user for usergroup I tick "Send PM" and this PM with "Approve" link is send whenever any user try to post in forum that he doesnt have a permission for it.
- this PM is sent on users behlaf [I find this part a problem, because I do not know wheter user who attempted to post in certain forum is really interested in posting in this certain forum (what mostly happen is that some newbies push "new thread" button wherever they happen to be)]

Desired situation:
- I suggest not to send PM on users behalf to admin but rather send automated PM to user asking him "Are you interested in posting in XY forum and become member of XY usergroup?" In this very same PM he will have a link like "I want to join" and once he click the link admin gets application PM with "Aprove" link.
----------------------------------------

Model situation:
I have a forum with articles/tutorials. Lot's of newbies are posting here because they happen to read tutorial and they start new thread with questions. Then I need to moderate this forum. I would rather use permission base system with your customized annoncement saying that "This forum is dedicated to tutorials. If you are interested in posting tutorials, PM was sent to you with application link to join our tutorial authors usergroup. If you are not interested in posting tutorial, please ignore PM and find appropriate forum to post your thread".
------------------

hope it is a bit better now ? ;-)