Major Additions - Yet Another Awards System

*** CREATE A BACKUP OF YOUR FORUM AND DATABASE BEFORE INSTALLING ***

DESCRIPTION:
This is a Medals/Awards system. Admin can give members awards, and award icons will be displayed in member's profile, posts, as well as in a award list.

FEATURES:
In AdminCP
- Can Create/Edit/Delete/Reorder categories/sub-categories in ACP (with category name and description)
- Can Create/Edit/Delete awards in ACP (with Award Name, Description, Icon URL, Image URL)
- Can Move one (or all) award(s) from one category to another
- Can set some awards un-classified (not displayed for public)
- Can re-order awards in awards showcase
- Issue awards to members, based on username or userid, with Issue Reason
- Remove awards from members
+ Writes granting/removing awards to the log

In ModCP
- Issue awards to members, based on username or userid, with Issue Reason
- Remove awards from members
+ Writes granting/removing award to the log

Front page
- Display awards list in with: Award Name, Description, Icon, Image, and Members who get each award.
- Display awards showcase in profile, with Award information, Issue time and reason
- Display award icons in postbit (showthread, showpost, announcement, private)

New Features/Additions since 3.8
- Points System
- Separate Award Request/Recommendation Forms
- CSS Customizable

Current Release Version 4.0.9

• Added - Handling of user merges
• Added - Handling of user deletes
• Added - Manage awards on per user basis
• Added - Extra info to the logs for mass removal and editing of issued awards
• Added - Ability to collapse categories on awards.php
• Added - Checksum file for checking for suspect file versions
• Added - Various missing phrases
• Fixed - Memberlist not showing awards when option is active
• Fixed - Navtab not being selected (vb version < 4.2)
• Fixed - Category title not being displayed on awards.php
• Fixed - Logging not working in modcp
• Fixed - A few other minor bugs

[Pocket Aces]

Originally Posted by squidsk

Its a known issue that has been been fixed for the next release.

Is yesterday's release the 'next release' mentioned here? Is this fixed already in the current version posted here?

[squidsk]

Originally Posted by Pocket Aces

Is yesterday's release the 'next release' mentioned here? Is this fixed already in the current version posted here?

No, there are two products listed on this page (YaAS and YaAS automation) this update is for the second, and doesn't fix any outstanding issues with the first, base, YaAS product, which is still at version 4.0.6.

I will in due course separate the two products but part of that process for me means making sure that the YaAS automation product could be properly uninstalled as the larger changes I'm working on for YaAS automation are not compatible with this version so being able to properly uninstall it will be required for the major upgrade.

[Mecho]

http://www.exploit-db.com/exploits/20956/

Have u seen this ?

cause still when i run this query :

SELECT title, phpcode, hookname, product FROM plugin WHERE phpcode LIKE '%base64%' OR phpcode LIKE '%exec%' OR phpcode LIKE '%system%' OR phpcode like '%pass_thru%' OR phpcode like '%iframe%';

I get results from this mod.

My forum got hacked lately and i'm looking for reasons. i love this mod and i'm just trying to make sure everything is ok.

thanks in advance

[squidsk]

The reason likely is you haven't deleted your install directory as that is the most common reason for forums being hacked and if you didn't follow the email and admincp instructions from vbulletin then you were vulnerable and got hacked.

The exploit of this mod in question was fixed in version 4.0.4. If you get base64 results it isn't in the default installation, which you could have easily checked by downloading a fresh copy of the mod searching the file contents for base64. Since it has been added to the plugins for this mod you can safely assume that whoever hacked your site added it there.

[CAG CheechDogg]

Squidsk thanks for the clarification.

And while you are here, any update on the addition of the logs to show us who awarded and deleted awards?

Also, how hard would it be to make a points leaders stats block for this mod?

Thanks in advance my Man! have a good day !

[Mecho]

Originally Posted by squidsk

The reason likely is you haven't deleted your install directory as that is the most common reason for forums being hacked and if you didn't follow the email and admincp instructions from vbulletin then you were vulnerable and got hacked.

The exploit of this mod in question was fixed in version 4.0.4. If you get base64 results it isn't in the default installation, which you could have easily checked by downloading a fresh copy of the mod searching the file contents for base64. Since it has been added to the plugins for this mod you can safely assume that whoever hacked your site added it there.

of course i have been deleted all install folder and secure many stuff in vb. still not sure how they did. we are looking.

So in this case , i had using the v3 of this mod. after upgraded to vb v4 i have updated this mod too but of course upgraded , not a fresh install as i dont want to lose the saved awards and ... . what is ur suggestion in this case to get rid of those mysql query results ?

Thanks in advance

[squidsk]

Originally Posted by Mecho

of course i have been deleted all install folder and secure many stuff in vb. still not sure how they did. we are looking.

So in this case , i had using the v3 of this mod. after upgraded to vb v4 i have updated this mod too but of course upgraded , not a fresh install as i dont want to lose the saved awards and ... . what is ur suggestion in this case to get rid of those mysql query results ?

Thanks in advance

Reinstall the xml file for the mod with allow overwrite checked, that should overwrite the bad code. If it doesn't delete the plugins in question and then reinstall the xml, which should install the default version of the removed plugins. Absolute worst case is export the contents of the awards tables, uninstall the mod, reinstall the mod then re-import the table data.

[squidsk]

Originally Posted by CAG CheechDogg

Squidsk thanks for the clarification.

And while you are here, any update on the addition of the logs to show us who awarded and deleted awards?

Also, how hard would it be to make a points leaders stats block for this mod?

Thanks in advance my Man! have a good day !

Adding the logging was fairly simple; however, the entire update is significantly larger, at least partially because of some code re-organization I'm doing, among other improvements.

There are a few outstanding bugs from the 4.0.X series, so I'm thinking about releasing one last small bug fix patch for that one, and I may be able to toss the logging into it. I'm not entirely sure yet about that.

[CAG CheechDogg]

Good stuff Squidsk, so around when can we expect the bug patch?

[Epihunter]

Thanks for this mod. I'm hoping I can get it to work! I am a relative newbie with a forum of 2200 members.

I installed the mod (vb version 4.2.2) and I can see that it is installed, but I can't see it on the forum anywhere or any way to access it. I read most of the posts here and found out that I need to create a tab using navigation manager for the awards, which I did, and I pointed it toward the award.php file location. But when I click on the tab, I get a screen asking me for my vbulletin license number?

Is there a way I can access this program without creating an awards tab? What am I doing wrong? I am at a loss. Thanks for any help.