Deluxe vB User login and access control on non vB pages

Hack Description

This is the deluxe version of the user authentication and access control system I use on the non vB pages on my website.
For the simple no frills version look here.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

It also displays the logged in users Avatar, number of unread PM's, New posts since last visit, total posts and total threads.
It also allows you to specify a maximum Avatar size, and resize any avatars larger than that, while keeping their height/width ratios in proportion!
Its very handy if you allow large avatars, but want a small format display on your non forum pages.

If the user is not logged in, a login box is displayed, along with total posts and total threads in the forums.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This is a work in progress and currently a beta version. It was a little rushed as a few people were pushing for it Its missing a couple of planned things like newest member etc, but they will be added in a later version.

This script has been confirmed as working on

• vB 3.5.x - All Versions
• vB 3.6.x - All Versions

Known Bugs
Will not display Avatars correctly if they are kept in the file system (database avatars are fine)

Changelog

Version 2.20 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code
• Fixed - Avatar display code bug

Version 2.10 (4th June 2006)

• Fixed - "MySQL Error : Invalid SQL " when using Database thread/forum marking.
• Fixed - Javascrip error in some versions of IE.

Version 2.00 (16th April 2006)

• Fixed - "MySQL Error : Unknown column 'newposts' in 'field list' "
• Fixed - Number of PM's not displaying in all installs.
• Added - Displays date and time of last login.
• Added - Total number of saved PM's.

To upgrade just overwrite the existing login_inc.php file with the new one.
You will need to re-edit the path on line 3 and also redo any formatting changes you may have done for the last version.

Version 1.0 (15th Feb 2006)

• Initial Release

Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[Paul_Hollibone]

Hey Guys.

I have an issue regarding this hack.

It is actually working fine, and it was on my old server aswell.

However, since I moved across to a new server, this error has been appearing on all the pages I have that chdir script on. The error is as follows.

Fatal error: Call to a member function unlock_tables() on a non-object in /home/thrillhi/public_html/forums/includes/functions.php on line 4419

And it is appearing just at the bottom of my page's.

A link to it can be found here: www.thrillhistory.com

Thanks guys for your assistance.

[Paul_Hollibone]

Hey Guys, is anyone able to help an Aussie?

[Billspaintball]

I think it may be the MySQL/PHP config on your new server but Im not sure.

[TheJackal56]

Just wanted to say this works great!

I do have a couple of questions:

1. The login never times out, you have to actually click logout.
Is there a way to set a timeout?

2. On both Login and Logout can the VB menus that display(logout you have to actually click out of) can the code actually hide these menu's.

Thanks,

Bob

[Billspaintball]

Originally Posted by TheJackal56

1. The login never times out, you have to actually click logout.
Is there a way to set a timeout?

It should have the same timeout as your site.
Do you have a session expire time set in your Admin CP?

2. On both Login and Logout can the VB menus that display(logout you have to actually click out of) can the code actually hide these menu's.

Im not 100% sure what you mean here?
Can you give me a little more detail please.

[TheJackal56]

Session timeout is set in the admincp

I have attached to screen shots.

Both screens stay up until you click continue or hit the back button.

[Billspaintball]

Originally Posted by TheJackal56

Session timeout is set in the admincp


I have attached to screen shots.

Both screens stay up until you click continue or hit the back button.

Thats weird.
I havent come accross this before.

In the "Cookies and HTTP Header Options" section of the Admon CP what happens if you turn the "Remove Redirection Message Pages" setting off?

[Aotw]

I have installed the login to our page and it works, but now i need to modify the design a bit. I have added a css file to the login_inc.php but i need to add some linke behaviour with css class. Here is one of the lines i need to modify, i have tried some but no sccess, only getting errors then i do it.

PHP Code:

echo"<a href=\"".$forumpath."search.php?$session[sessionurl]do=getnew\">$vbphrase[new_posts]</a>: $newposts<br />";} 


I alos having a problem with our cutenews installation on the same page, wich started direct after i added the login addon. Been trying to get some support at their site but no luck, maybe someone here could help?

Getting following error.

Warning: htmlspecialchars() expects parameter 1 to be string, array given in /home/kreativi/public_html/portal/news/inc/functions.inc.php on line 43

[SKNY]

For the CSS.. heres what I did.

The page I included the login_inc.php already had a CSS Style Sheet applied to it so I just used the class...


Anyway part of my style sheet.

PHP Code:

<style>

.orange{
    color:#FF9300;
    text-decoration:none;
}

.orange2{
    color:#FF9300;
}

.orange_9{
    color:#FF9300;
    text-decoration:none;
    font-size:9px;
}
<style> 


Now all I did was add the class to the line of code I needed to apply a style to..

PHP Code:

echo "<br><a href=\"".$forumpath."search.php?$session[sessionurl]do=getnew\" class=\"orange\">New Posts</a>: $newposts<br />"; 


The above is the same code as yours below, however I didn't want to use the vB Phrase so I entered my own text.. other than that its the same as yours.

notice this part...

PHP Code:

class=\"orange\"> 


thats how you enter the class, and when you include the script onto your page the part with the class should have been styled..

As for the CuteNews thingy Im not sure.. I'll need to see the file functions.inc.php and the rest of your code.

Anyway hope I was of some help

- SKNY

[Aotw]

That helped alot SKNY, needed an example how to write the class in the php code, THX.