Deluxe vB User login and access control on non vB pages

Hack Description

This is the deluxe version of the user authentication and access control system I use on the non vB pages on my website.
For the simple no frills version look here.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

It also displays the logged in users Avatar, number of unread PM's, New posts since last visit, total posts and total threads.
It also allows you to specify a maximum Avatar size, and resize any avatars larger than that, while keeping their height/width ratios in proportion!
Its very handy if you allow large avatars, but want a small format display on your non forum pages.

If the user is not logged in, a login box is displayed, along with total posts and total threads in the forums.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This is a work in progress and currently a beta version. It was a little rushed as a few people were pushing for it Its missing a couple of planned things like newest member etc, but they will be added in a later version.

This script has been confirmed as working on

• vB 3.5.x - All Versions
• vB 3.6.x - All Versions

Known Bugs
Will not display Avatars correctly if they are kept in the file system (database avatars are fine)

Changelog

Version 2.20 (24th April 2007)

• Fixed - // in paths bug
• Fixed - Javascript warning in some browsers
• Fixed - Tidied up some code
• Fixed - Avatar display code bug

Version 2.10 (4th June 2006)

• Fixed - "MySQL Error : Invalid SQL " when using Database thread/forum marking.
• Fixed - Javascrip error in some versions of IE.

Version 2.00 (16th April 2006)

• Fixed - "MySQL Error : Unknown column 'newposts' in 'field list' "
• Fixed - Number of PM's not displaying in all installs.
• Added - Displays date and time of last login.
• Added - Total number of saved PM's.

To upgrade just overwrite the existing login_inc.php file with the new one.
You will need to re-edit the path on line 3 and also redo any formatting changes you may have done for the last version.

Version 1.0 (15th Feb 2006)

• Initial Release

Click on Install
If you have this script installed then please click on the install link because;

• You will get notified if any security issues are reported.
• You will get notified when there are any upgrades to this script
• It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.
Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

[Billspaintball]

Originally Posted by CSGCarl

Hey,

I'm still having a problem I've fixed other but...

								</table></td>\";

Error:

Parse error: syntax error, unexpected T_STRING, expecting ',' or ';' in /home/-----/public_html/homepage.php on line 1016

And line 1016 is:


Code:

echo "Your not logged in so we display this";

I can't see whats wrong there.

If some one could help me out this would be great.


Regards,

Carl

This line here

</table></td>\";

needs to be

</table></td>";

The end " is part of the PHP statement and not the enclosed HTML so it should not be escaped, else you will get an error pointing to the next line of code that has another " in it.
(Escaping the " ment that you never ended that PHP statement correctly)

[Billspaintball]

Also, I recommend taking a few online tutorials on using HTML with PHP.
You really just need a basic level of experience in using them togeather and it all becomes clear.

[CSGCarl]

Hi,

Ye I have sorted it all now, well on way with it all now

[consolegaming]

Is there anyway to use this (i.e. including global to make logging in easy to sort out) without it auto banning banned users from our own pages?

The site I'd like to use this on will have a separate banning system on the site itself as forum bans shouldn't result in suspensions from the rest of the site. The two are very unrelated and as such shouldn't affect each other's bans.

[Billspaintball]

Originally Posted by consolegaming

Is there anyway to use this (i.e. including global to make logging in easy to sort out) without it auto banning banned users from our own pages?

The site I'd like to use this on will have a separate banning system on the site itself as forum bans shouldn't result in suspensions from the rest of the site. The two are very unrelated and as such shouldn't affect each other's bans.

I havent tested it with a banned group, but it should not prevent them from accessing the pages this is used on.

[isnichwahr]

hi,

at first i have to say big thanks for this script, i need it very much and it looks pretty cool, but i have problem with it:

the script works fine in this way: i created an extra logintest.php with this contents:
require_once('/srv/www/htdocs/web0/html/v4/vb3/global.php');
require_once('/srv/www/htdocs/web0/html/v4/vb3/login_inc.php');

and in neu.php im including this logintest.php by:
<?php chdir("/srv/www/htdocs/web0/html/v4/vb3");
require("/srv/www/htdocs/web0/html/v4/vb3/logintest.php"); ?>

when i open the neu.php it works fine (when i delete the cookies at firefox options first),

but when i put the include code from neu.php into my index.php (same code!) i get:
Warnung: array_keys() [function.array-keys]: The first argument should be an array in /includes/functions.php (Zeile 4994)

Warnung: Empty regular expression in /includes/functions.php (Zeile 4994),

so some code of the board or loginscript collades with the code on my page. is there a possibility to fix this problem? i dont want to use frames/iframe or a little popup window to include the loginform, but i dont know how i can include it, without getting these errors, remember: neu.php alone works fine

many thanks, david

[Sean James]

Great hack, thank you for your hard work

Added custom CSS, and change some of your code so it is W3C validated.

http://www.bluepearl-design.com/index.php

[Sean James]

Originally Posted by Hakaslak

What I use to get total number of members. Works for me. Posting it here because it seems to be something people really want. Dunno why. I script kiddied the code that Billspaintball used to get thread/post counts, and did a quickie Google search for how to count rows. and mashed them up. /shrugs

Demo: beta.awp-tech.com

// get total number of members
$getstats_user_count = $db->query_read('SELECT COUNT(*) FROM ' .TABLE_PREFIX . 'user');
while ($forum_user_count = $db->fetch_array($getstats_user_count))
{
	$totusers += $forum_user_count['COUNT(*)'];
}
$totusers = vb_number_format($totusers);

I am really NOT good at coding (I know no PHP/mySQL), so use at your own risk. If I made any mistakes, please let me know so I can correct it!

Hakaslak figures usage instructions would be nice:

#
#-----[ OPEN ]------------------------------------------
#

login_inc.php

#
#-----[ FIND ]------------------------------------------
#

$totposts = vb_number_format($totposts);

#
#-----[ AFTER, ADD ]------------------------------------------
#

// get total number of members
$getstats_user_count = $db->query_read('SELECT COUNT(*) FROM ' .TABLE_PREFIX . 'user');
while ($forum_user_count = $db->fetch_array($getstats_user_count))
{
	$totusers += $forum_user_count['COUNT(*)'];
}
$totusers = vb_number_format($totusers);

#
#-----[ FIND ]------------------------------------------
#

$vbphrase[posts]: $totposts<br />

#
#-----[ AFTER, ADD ]------------------------------------------
#

$vbphrase[members]: $totusers<br />

All done!

Thanks for that, worked perfectly

[Sean James]

Originally Posted by Billspaintball

Ok,
I have finally had enougth time to play around with this and find the cause and solution.

Cause - When redirected for expired password you are redirected to the directory that your login script is located in, not your forums root.

Fix - Edit phrase called

passwordexpired

Your current phrase should be

Your password is {1} days old, and has therefore expired.<br />
<br />
Please change your password using <a href="profile.php?{2}do=editpassword">this page</a>.

change it to

Your password is {1} days old, and has therefore expired.<br />
<br />
Please change your password using <a href="../forums/profile.php?{2}do=editpassword">this page</a>.

where ../forums/ is your forums directory.

Ive only tested this for expired passwords, not for expired vbplaza, but I would think you would have to edit the expiring vbplaza phrases in the same manner.

Sorry one last thing, i am trying to apply this to my forum but cannot find this phrase in my 'phrase manager'

[consolegaming]

Originally Posted by Billspaintball

I havent tested it with a banned group, but it should not prevent them from accessing the pages this is used on.

I actually made my post because it did happen lol. We implemented it not even thinking about the issue and then about 5 minutes later we had many complaints from our users that they could no longer access the ladders (we're an online competition website i.e. ladders, and tournaments for online games). It was telling them they were banned and with their ban reason just like the forum bans would be I presume.

So we naturally had to revert back to our old pre-made solution which is just a custom script which just uses cookies and sends the login info to the login.php page when logging in. Though as some of our users have been having problems (particularly Mac Safari users) staying logged in we were looking for a more foolproof system which included sessions (as we presumed that was at least part of the issue).

Any help that could be given on the being banned situation would be greatly appreciated.