HTTP Upload Hack Version 2.0

Welcome to the new Update for the HTTP Upload Hack from Pseudomizer.

Do you need version 1.0 for this hack ?

No. This is independant from version 1.0.

What is new compared to the version 1.0 ?

- user authentification is now per config file or per VBulletin database
- new file extension filter to prevent unwanted files to be uploaded
- new overwrite setting to either overwrite or deny the upload
- usergroup authentification against VBulletin database

Changes:

- sessions have been removed because some people could not work due to register_globals off
- all variables are now $_POST and can not be passed via URL

Installation:

For new installs and upgraders:
Open the http_upload_config.php file in an editor and make the appropriate changes BEFORE you upload the files to your forum directory.

Upgrade from 1.0 to 2.0 only:
Remove the old files ( http_upload_config.php, http_upload.php ) and place the new files in the forum root folder.

New Install only:
Just place the 2 files into your forum root directory.

Enjoy it. :devious:

Again: I take no responsibility if someone accidently deletes important files with this hack. This hack is dangerous if misconfigured. So please READ CAREFULLY the config file. If you have any questions or something is unclear feel free to ask in the Thread. I would be more then happy to answer to every question.

IMPORTANT: Support will only be given if the install button in this forum thread has been pressed. So please take the time now to click the install button after your installation. Thanks. :classic:

Cheers,

Pseudomizer

[Pseudomizer]

Originally Posted by rookie7

I might be wrong but I don't think you can upload more than 2 MB in most hosts since it is configured in php.ini . There's a way around that, but...I don't think your host will be happy if they found out. :nervous:

You are right about the 2MB. But you can go up to 11MB before VBulletin will reject the upload. This only applies for VBulletin uploads.

My hack does not rely on the VBulletin database so there are the following limitations per default:

- 2MB max due to php.ini
- 30 secs due to timeout set in php.ini

The second limitation can be altered via your php file by adding the following line at the beginning of your php file:

PHP Code:

ini_set("max_execution_time", "3600"); 


This will give you 10 minutes for uploading but please keep in mind, that many providers are preventing things like this and if you work around their limitation then your account will be disabled very quickly.

The first limitation can not be altered via script. So you need access to the php.ini file to be able to alter this setting.

Cheers,

[FleaBag]

Excellent work. Thanks.

[msimplay]

no i mean quotas
quota means a total of allowed diskspace by that user

[Pseudomizer]

Originally Posted by msimplay

no i mean quotas
quota means a total of allowed diskspace by that user

I am fully aware of what quotas are. Again the question: How do you want to trace what files have been uploaded and which file size they have ? What if he replaces a file and does not add a new file ?

This is not possible to trace that unless you create something special like:

forum/Folder1 for user hugo
forum/Folder 2 for user martin

in both folders you place the http_upload.php but you have to modify each php file for a specific user. You have to run a command to get the directory size of the specific folder and then calculate what he wants to upload. If the size exceeds a specific size ( which you have to set for each php file individually ( or create one global settings file ) then you block the upload.

But this hack does not have a folder management included, does not have usermanagement included, does not have sizing checks included and does not react on specific user accounts. It just reacts on usergroup permissions.

Your request would be very specific and it would take some time to develop something like this. But i doubt that this request will become very popular or not ?

What is your aim ? What do you want to achieve ?

Cheers,

[d3nnis]

still waiting for you to add on the file type restriction,Pseudomizer

[Pseudomizer]

Originally Posted by d3nnis

still waiting for you to add on the file type restriction,Pseudomizer

D3nnis ? I think you missed something. Please read again all new features for this update. I HAVE implemented a file type restriction. Did you read the whole posting 1 in this thread ?

Cheers,

[d3nnis]

Originally Posted by Pseudomizer

D3nnis ? I think you missed something. Please read again all new features for this update. I HAVE implemented a file type restriction. Did you read the whole posting 1 in this thread ?

Cheers,

oops miss that out, sorry!

by the way since u added this new restriction, i can safely mod it into a image hosting module rite? by the way... where are these files uploaded to?

[Pseudomizer]

Originally Posted by d3nnis

oops miss that out, sorry!

by the way since u added this new restriction, i can safely mod it into a image hosting module rite? by the way... where are these files uploaded to?

In the same directory where you http_upload.php file is located.

Cheers,

[d3nnis]

Originally Posted by Pseudomizer

In the same directory where you http_upload.php file is located.

Cheers,

cool, do i need to chmod permission this directory?

[Pseudomizer]

Originally Posted by d3nnis

cool, do i need to chmod permission this directory?

Hi D3nnis,

yes. The Webserver needs write access to this directory. Some people just go with 777.

Cheers,