Deluxe vB User login and access control on non vB pages

Hack Description

This is the deluxe version of the user authentication and access control system I use on the non vB pages on my website.
For the simple no frills version look here.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

It also displays the logged in users Avatar, number of unread PM's, New posts since last visit, total posts and total threads.
It also allows you to specify a maximum Avatar size, and resize any avatars larger than that, while keeping their height/width ratios in proportion!
Its very handy if you allow large avatars, but want a small format display on your non forum pages.

If the user is not logged in, a login box is displayed, along with total posts and total threads in the forums.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This is a work in progress and currently a beta version. It was a little rushed as a few people were pushing for it Its missing a couple of planned things like newest member etc, but they will be added in a later version.

This script has been confirmed as working on

• vB 3.5.x - All Versions
• vB 3.6.x - All Versions

Known Bugs
Will not display Avatars correctly if they are kept in the file system (database avatars are fine)

Changelog

Version 2.20 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code
• Fixed - Avatar display code bug

Version 2.10 (4th June 2006)

• Fixed - "MySQL Error : Invalid SQL " when using Database thread/forum marking.
• Fixed - Javascrip error in some versions of IE.

Version 2.00 (16th April 2006)

• Fixed - "MySQL Error : Unknown column 'newposts' in 'field list' "
• Fixed - Number of PM's not displaying in all installs.
• Added - Displays date and time of last login.
• Added - Total number of saved PM's.

To upgrade just overwrite the existing login_inc.php file with the new one.
You will need to re-edit the path on line 3 and also redo any formatting changes you may have done for the last version.

Version 1.0 (15th Feb 2006)

• Initial Release

Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[Taco John]

I'm having some trouble, and it's probably due to my lack of knowledge...

Could you please provide instructions on how to use iframes to include this on non-PHP pages? My front end content engine is shtml based.

[Mr_Bob]

Originally Posted by bandare

will this work on 3.6 forums?

Yes, I'm using it with 3.6 right now without any problems .

[Billspaintball]

Originally Posted by Taco John

I'm having some trouble, and it's probably due to my lack of knowledge...

Could you please provide instructions on how to use iframes to include this on non-PHP pages? My front end content engine is shtml based.

Sorry it only works with PHP.

[ocdotcom]

*edit* Thanks for the GREAT mod Bill! but Ive suddenly got a problem. One of my workstations (WinXPpro, all windows updates, IE6 etc) is not being redirected back to the custom .php page I made. It's just going straight to the index.php for the forums. Although one of my other workstations (same specs) is being redirected. I cleared cookies etc but it's still not working. Ive made no major changes. Without me posting a bunch of my code here - any thoughts? Im certain my paths are correct etc because this was working before and still works on my other PC...

Thanks in advance!

[ocdotcom]

Well I managed to fix this. on about line 154 there was this:
echo"<br />...
Which I changed to take out the /:
echo"</br>...
Would this have helped?

[ocdotcom]

Well that seemes to work once - now I am not redirecting anymore. This is so frustrating...

*edit*
I have determined that my problem is this: I can log into my custom page (home.php) 1 time and get redirected back to that page after logging in. Subsequent logins (after clearing cookies etc) take me directly to the forums index.php page. I have no idea whats wrong. I made a new profile on my PC and logged into it so it was a fresh user. I then logged into my home.php which includes the basic require_once info etc and got redirected back to that page - the avatar displaying correctly etc. I logged out and cleared cookies and immediately logged back in and instead of being redirected I get the forum index.php page...
I have done all of the troubleshooting recommended by Bill and I KNOW my paths are correct. I just realized also that I was having the double // problem which I fixed in the login_inc.php. Ive also tried verifying there was no spyware on my PC (AdAware), no windows firewall turned on (WinXPpro), doing Windows Updates, I even tried Firefox (didnt work either), my VB cookie path has always been / and not /forums/ etc...

Im lost as to what to try next...

[Grasty]

Originally Posted by delive

What is the code that evaluates the users additional usergroups. Is it possible to check and see if they are part of an additional usergroup?

What should i change
$vbulletin->userinfo['usergroupid'] == '5'
to?

I would also like to know a solution to this.

[Billspaintball]

Originally Posted by Grasty

I would also like to know a solution to this.

There have been a number of requests for this.
I havent had time yet to look at how vB handles secondary groups.
Its on the todo list, but no ETA as yet.

[futuredood]

can you fix this code.. on my regular pages, i've got a redirect code in the form field that redirects to the usercp during login. i've tried using the same code in the login_inc.php file, but it doesn't seem to work:

<input name="url" type="hidden" value="/usercp.php" />

[Billspaintball]

What error do you get?

What happens if you use the full url instead of just /usercp.php ?