The Arcive of Official vBulletin Modifications Site.

Simple vB User login and access control on non vB pages · **Released**: 12-01-2006

Hack Description

This is a cutdown version of the user authentication and access control system I use on the non vB pages on my website.

This uses the vB 3.6 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

Ive cut it down to the bare minimum that it needs to work, no fancy stuff such as avatars, PM's, or even formating.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This script has been confirmed as working on

vB 3.6
vB 3.6.1
vB 3.6.2
vB 3.6.3
vB 3.6.4
vB 3.6.5

Changelog

Version 1.10 (24th April 2007)

Fixed - // in paths bug
Fixed - Javascript warning in some browsers
Fixed - Tidied up some code

Version 1.0 (2nd December 2006)

Very similar to my vB 3.5 version, however logout bug fixed and should be more compatible with other scripts on your page.

Click on Install
If you have this script installed then please click on the install link because;

You will get notified if any security issues are reported.
You will get notified when there are any upgrades to this script
It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.

Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

Taipa · #**112** 04-14-2007, 09:58 PM

Quote:

Originally Posted by suttercain

Thanks for replying. I fixed the login part for IE I think it's on page 7 of this forum.

If you mean this

PHP Code:


			
"<input name=vb_login_username type=text id=navbar_username onfocus=\"if (this.value == '$vbphrase[username]') this.value = '';\" size=10 />";

Thank you; I already changed that, but it didn't make a difference. It's still not letting me actually log in using IE.
Even before i changed that, I wasn't getting any errors in IE, it just wasn't working.

I do have my cookies set to / and not forum/, so I don't know what the IE issue is. :P

suttercain · #**113** 04-14-2007, 09:59 PM

Post Removed Because I jumped the gun. Seems to be working perfectly. Will be donating to Bill on Friday for his great work

Taipa · #**114** 04-14-2007, 10:04 PM

Quote:

Originally Posted by suttercain

Okay, so I got it to even display the info in IE to only level 6 members....

Would you mind sharing how you did this?
Even with a security/cookie issue, I'd like to see how it was done.

Thanks!

suttercain · #**115** 04-14-2007, 10:07 PM

The problem you may be having is when you go into vBulletin options-> Cookies and Setting your site may be (blank) you should have a drop down that allows you to select yourdomain.com. Once I changed that it worked. That is the only thing I did different. The table code I posted above is the same... well here is the entire code:

Code:

<?php
$curdir = getcwd ();
chdir('/home/superman/public_html/forums');
require_once('/home/superman/public_html/forums/global.php');
chdir ($curdir);
?>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<title>Untitled Document</title>
</head>

<body>
<?php
   require_once('../forums/login_inc.php');
?> 

<?php
if ($vbulletin->userinfo['usergroupid'] == '6' )
    {
    echo "<table width='100%'  border='0' cellspacing='0' cellpadding='0'>
  <tr>
    <td>NEWS</td>
    <td>COMICS</td>
    <td>REVIEWS</td>
    <td>CHARACTERS</td>
    <td>CREATORS</td>
    <td>ARTICLES</td>
  </tr>
  <tr>
    <td><a href='submit_news.php'>Submit News </a></td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td><a href='view_edit_news.php'>Edit News </a></td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
</table>";
             } else {
             echo "You do not have permission for this page"; }
    ?> 

</body>
</html>

Taipa · #**116** 04-14-2007, 10:25 PM

Quote:

Originally Posted by suttercain

The problem you may be having is when you go into vBulletin options-> Cookies and Setting your site may be (blank) you should have a drop down that allows you to select yourdomain.com. Once I changed that it worked. That is the only thing I did different. The table code I posted above is the same... well here is the entire code:

Thank you! That solved my issue.

Quote:

Originally Posted by suttercain

When you click logout... it takes you to vBulletin's logout page and says all cookies have been cleared... NOT TRUE!

If you go back to the same page that you tried logging out from you can see that it is still logged in!

Unless you manually go into IE and clear all your cookies and RESET your history... you will still be logged in.

I did not have this issue in IE.
I clicked "Return to the page you were previously viewing", and I was logged out. I also tried it just typing in the URL after logging out; I was still logged out properly.
But I don't use IE, so I don't know how to check the cookies to make sure the one from my site was removed or not.
But it appears to be logging me out properly.

Billspaintball · #**117** 04-16-2007, 02:12 PM

Quote:

Originally Posted by Snatch

Hi, this works! Make a copy of the needed Forum Forum files on the secound Server.
Then you must set in the config.php on the secound server the ip to the server where the VB-Database is runnig.
I have made this to and it works fine.

Example:
My Forum: www.celebritymarkt.org (Server 1)
My Uploader 10mbit.celebritymarkt.org/uploader (Server 2)

GreeTz
Snatch

Thanks for this, will add it to the troubleshooting guide as a workaround.

activa · #**118** 04-21-2007, 03:34 PM

it is possible to use the template system vb in non vb page with this mod ?

jags2ooo · #**119** 04-21-2007, 06:30 PM

Quote:

Originally Posted by suttercain

I figured out the javaScript error... only took 14 hours. Sorry I'm a php guy not a JavaScript guy.

Anyway...

replace:

Code:

echo "<input name=vb_login_username type=text id=navbar_username onfocus=if (this.value == '$vbphrase[username]') this.value = ''"; size=10 />";

with

Code:

echo "<input name=vb_login_username type=text id=navbar_username onfocus=\"if (this.value == '$vbphrase[username]') this.value = '';\" size=10 />";

The quotation marks were missing. IE was expecting them. Hope this helps. Donation can be made to your local Animal Shelter.

cant find tha tline in the document

gbaker · #**120** 04-22-2007, 09:21 PM

Firstly, suttercain, it appears you could be very helpful to others...but you need to relax dude...seriously.

1. I tried to see if this was posted before, but was unable to find. Everything works great, but when "Log Out" is clicked, the "cleared cookies" vb page is shown and stays. Is this the normal behavior? Is there a known workaround to get it to return the initiating page? (other than hacking the vb code).

2. On the subdomain issue, I have the typical: xxx.org and forums.xxx.org. By doing a "cwd()" in both the domain and subdomain, I confirmed that the physical locations are both under the main domain. However, the require_once of the global.php simply prohibits the page from displaying. Bypassing this with a technologically-superior "//" (commenting out), the page loads fine but displays the following after clicking login:

"In order to accept POST request originating from this domain, the admin must add this domain to the whitelist"

Dunno if this will help at all, but figured I'd post it.

Billspaintball · #**121** 04-24-2007, 02:55 PM

Updated

Fixed - // in paths bug
Fixed - Javascript warning in some browsers
Fixed - Tidied up some code
Fixed - Avatar display code bug

Download the update from the first post, and see the 2nd post for additional workarounds for the 404 on Expired passwords and cross domain login issues.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.05757 seconds Memory Usage 2,329KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (3)bbcode_code (1)bbcode_php (6)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)pagenav_pagelinkrel (11)post_thanks_box (11)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (11)post_thanks_postbit_info (10)postbit (11)postbit_onlinestatus (11)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!