Simple vB User login and access control on non vB pages

Hack Description

This is a cutdown version of the user authentication and access control system I use on the non vB pages on my website.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

Ive cut it down to the bare minimum that it needs to work, no fancy stuff such as avatars, PM's, or even formating.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This script has been confirmed as working on

• vB 3.5.x - All Versions

Changelog

Version 1.30 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code

Version 1.20 (2nd December 2006)

• Fixed Logout incorrect path bug
• Made change to reduce compatibility problems with foreign scripts

Version 1.10 (4th Feb 2006)

• Changed login_inc.php so you only need to edit path in one place now.
• Added more commenting to login_inc.php
• Added usage instructions to instructions file
• Added troubleshooting guide with all common problems and fixes to instructions file.

Note: It is NOT necessary to update from 1.0 to 1.10.
There is no functionality changes or bug fixes between these 2 releases.

Version 1.0 (17th November 2005)

• Initial Release

Deluxe Version of this hack is now available
Has Avatars, PM's, Number of Posts etc.

Click Here


Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[Billspaintball]

Originally Posted by Majava

Do i need to put that still in everypage? or just the index page?
.

If everything is just included into the index page thats the only spot you would need to put it.

You can post the index page code if you like and I will have a look for anything obvious.

[Majava]

This is at the top

PHP Code:

<?php
   chdir('/path/to/forum'); 
   require_once('/path/to/forum/global.php');  

    // Do not edit anything below this line
    // Do not edit anything below this line
    session_start();

    // You can now edit below this line
    // You can now edit below this line
?>

PHP Code:

            <?php
            $page = $_GET['page'];
            
            if (($page == "news") || ($page == "status") || ($page == "armour") || 
                ($page == "protector") || ($page == "garment") || ($page == "swords") || 
                ($page == "blades") || ($page == "spears") || ($page == "glaives") || 
                ($page == "bow") || ($page == "jewlery") || ($page == "accesories") || 
                ($page == "skills") || ($page == "guides") || ($page == "guilds") || 
                ($page == "quests") || ($page == "maps") || ($page == "faq") || 
                ($page == "movies") || ($page == "screenshots") || ($page == "pictures") || 
                ($page == "wallpapers") || ($page == "art") || ($page == "downloads") || 
                ($page == "links") || ($page == "contact") || ($page == "jobs") || 
                ($page == "irc") || ($page == "main") || ($page == "potions") ||
                ($page == "scrolls") || ($page == "thanks") || ($page == "error_job") ||
                ($page == "explist") || ($page == "mailthanks") || ($page == "register") ||
                ($page == "lostpw")) {
    
                include("includes/".$page.".php");     
            } else if ($page == "") {
                include("includes/main.php");
            } else {        
//                include("includes/broken.php"); 
            }     
            ?>

This is my main code

[Billspaintball]

[QUOTE=Majava]This is at the top

PHP Code:

<?php
   chdir('/path/to/forum'); 
   require_once('/path/to/forum/global.php');  

    // Do not edit anything below this line
    // Do not edit anything below this line
    session_start();

    // You can now edit below this line
    // You can now edit below this line
?>

Try something like

PHP Code:

<?php  
session_start();
$curdir = getcwd (); 
chdir('/path/to/your/forums');     
require_once('/path/to/your/forums/global.php');  
chdir ($curdir); 
?>

If that fails to work then it looks like both scripts are just incompatible

[Dark s.s. Trunk]

I have a strange problem lol i seem to be permittly logged in. Now on my forums when i log off and go to main forum page it shows me as logged in, and on the page i put the code i hit log out goes to forums cookies cleared aand all but when it goes back to page still logged in,, even cleared IE cashe and still does it
----------------
Edit: that problem was bad cashe in IE but now ran into another problem, i have 2 php files i use one has a bit different b/c of the way i display some pages but works perfect on mainpage.php but any file that seems to use my mainpage2.php it goes to log in but keeps telling me to log in but still logged in on mainpage.php.. all ode for login exact same.

Note seems pages dun work on anything linked to in the address bar like thsi http://twistedeffects.com/mainpage.p...iles/tutorials

[hurry]

Originally Posted by AutoXer

I fixed it. Here's how:

AdminCP -> vBulletin Options -> Cookies and HTTP Header Options -> Path to Save Cookies

I changed the 'Suggested Settings' dropdown from '/forums/' to '/'

I did this but it still does not work for me and gives me the forum logged in screen and then again returns back to the page without being logged in. Please help.

[Billspaintball]

Originally Posted by Dark s.s. Trunk

Note seems pages dun work on anything linked to in the address bar like thsi http://twistedeffects.com/mainpage.p...iles/tutorials

I dont quite understand what you mean here.
What part of the login does not work exactly?

[Billspaintball]

Originally Posted by hurry

I did this but it still does not work for me and gives me the forum logged in screen and then again returns back to the page without being logged in. Please help.

I need a bit more detail than this please.

[Billspaintball]

Updated instructions with a change that may allow cross domain login to work.

[lightnb]

I'm having an issue where including global.php causes my main script to stop functioning.

I've commented out your code, line by line to locate the problem, and my script works until I allow global.php to be called.

At that point, all of the links on the page stop working (the login box works fine).

It is a search results page, and the links are in this format:

PHP Code:

<a href="<?=$PHP_SELF?>?query=<?=$query?>&page=<?=$page?>&limit=5">5</a>

Any idea why global.php interferes with the functionality of these links?

Thanks,

Nick

[Paris Holley]

does not work in 3.6 rc2, including global.php causes scripts to become unresponsive

*nvm*

was a cookie conflict