Miscellaneous Hacks - Cyb - Advanced Forum Rules

FEATURE UPDATES WILL BE RELEASED HERE:
https://vborg.vbsupport.ru/showthread.php?t=177559


==========


Info:
Advanced Forum Rules system for vBulletin.

Main Features:
-Rules shown on separate page (no file uploads required)
-BB codes enabled
-Options to force users to accept Forum Rules before can view forums, post, send PMs,...

See screenshots.


Installation:
1. Import XML file (as product): AdminCP > Plugin System > Manage Products > [Add/Import Product]
2. OPTIONAL (for some customized styles)
Open template "navbar" and add "$cyb_frules_link" after "vbphrase[faq]</a></td>".
3. OPTIONAL (to add 'reset acceptance status' to different place than default one)
Open template "MEMBERINFO" and add "$cyb_frules_force" wherever you wish.


To set options:
Go to: AdminCP > vBulletin Options > Cyb - Advanced Forum Rules


NOTE: You can check which users are (not) accepted Forum Rules by running db queries:
(Run queries through: AdminCP > Execute SQL Query)
List users who had accepted Rules:
SELECT * FROM `user` WHERE cfrules_read_status > 0;
List users who hadn't accepted Rules:
SELECT * FROM `user` WHERE cfrules_read_status = 0;


Versions:
v1.0 - Oct 06. 2005.
-First version
v1.5 - Apr 22. 2006.
-Navbar link is added automatically now (one installation step less)
-Navbar "Forum Rules" link can be disabled in hack settings
-"Manage Rules" link is on settings page now (no need for .xml menu file anymore - one file less to upload when installing)
-"Unknown Location" fixed
-Added function to enable/disable whole hack (predefined error message is displayed instead)
-Templates now goes to "Cybernetec" group in Style Manager
To upgrade from 1.0 to 1.5:
-Import product XML through AdminCP > Plugin System > Manage Products > [Add/Import Product] (Be sure "overwrite" is checked). Upload cfrules.php and cfrulesadmin.php (replace old files). Delete file \includes\xml\cpnav_cfrulesadmin.xml.
v1.6 - Aug 04. 2006.
-Release of this hack for vB v3.6
v1.7 - Aug 05. 2006.
-Uncached template bug fixed
v2.0 - Aug 07. 2006.
-Completely changed way this hack works. No more queries, no more file uploads. Now Rules can be exported because it's part of vB settings. Now you can use BB Codes, which means you can use all standard text formatting functions, smilies, etc. To upgrade: Uninstall old version > Import XML as product > Delete "cfrules.php" from your forums root > Delete "cfrulesadmin.php" from "admincp" folder of your forums
v2.1 - Aug 07. 2006.
-Fixed "Edit Forum Rules" link (didn't worked for some users)
v2.2 - Aug 25. 2006.
-If your forum's index.php file was renamed, for any reason, now you can enter new filename in ACP hack options to have this hack working properly
-Added "Product Version Checking" - https://vborg.vbsupport.ru/showthread.php?t=124679
v2.3 - Aug 26. 2006.
-New: User must accept Rules to be able to post on Forums (option can be disabled/enabled)
-Look improved (see screenshots)
-Codes improved
-Hack name changed to "Cyb - Advanced Forum Rules"
v2.4 - Aug 27. 2006.
-Fixed small javascript bug
-Removed redirection to forum index after Rules acceptance
-Note 1/2 lines replaced by boxes in hack settings
-Removed navbar link HTML Markup options
-Separate phrase created for navbar link
v2.5 - Aug 31. 2006.
-Added ability to reset read status for all users. After this they will need to accept the Forum Rules again
-Added note at the top of Forum Rules when user need to accept it to be able to post on forums
-Added explanation on how to check which users had (not) accepted Rules
v2.6 - Aug 31. 2006.
-Fixed bug (index file location/name setting doesn't work)
-Fixed bug (if user who haven't accepted Rules try to post via quick reply in IE he gets undefined error)
-Fixed bug (resetting the accepts doesn't work if index file was renamed)
-Added: Guests now also need to accept Forum Rules to be able to post (cookie-based)
-Added: redirection message for user who try to post but haven't accepted Rules
v2.6.1 - Aug 31. 2006.
-Fixed bug (if user has no permissions to post he will get standard "no permission" message, not redirection to Forum Rules)
v2.7 - Sep 11. 2006.
-After acceptance users are redirected to the page they were previously viewing
-No more need to set filename for "index.php" if it was renamed. Now misc.php is used, which nobody has need to rename.
NOTE: Don't forget to update the links to the Rules you were posted on your site - change it to YOURFORUMS/misc.php?do=cfrules
-Added confirmation dialog for resetting acceptance status for all registered users
v2.8 - Sep 14. 2006.
-Added option to exclude usergroups from accepting Rules
-Navbar link title moved from phrases to settings for easier translation/make-up
v2.9 - Sep 24. 2006.
-Added option to reset acceptance status for individual member
v3.0 - Oct 30. 2006.
-Whole code is now valid XHTML 1.0 Transitional
v3.1 - Nov 13. 2006.
-Option to force user to accept rules again in member profile can be turned off
-Added variable for above function that you can place it to another place in MEMBERINFO template ($cyb_frules_force)
-Bug fixed (if some user knows exact link for resetting acceptance status he can do it)
-Several other improvements/fixes
v3.2 - Mar 06. 2007.
-New: User must accept Rules before can send PMs
-New: Options to choose what user can't do before accepting Rules
-New: Option to replace Registration Rules with this hack's one
-New: Better counter (with miliseconds, improved browser compatibility)
-Fixed some "invisible" bugs in code and improved compatibility with the latest vB releases
v3.3 - Apr 21. 2007.
-New: Option to force user to accept Rules before can view forums
-Fixed bug where three queries are executed on places where not needed
-Fixed bug where blank rows are shown twice on registration rules page
-New in registration rules options (disable completely)
-Better redirection after Rules acceptance
-Some other optimizations in codes...
v3.4 - Apr 22. 2007.
-Fixed bug where PMs can not be sent even Rules are accepted
-Fixed bug where Quick Reply does not work even Rules are accepted
-Improved counter and added ability to completely disable it (tested and worked on IE, Firefox, and Opera)
-Improved compatibility with right-to-left styles (note: in Rules use [right] tags anyway)
-Fixed navbar link
v3.5 - Jul 22. 2007.
-Fixed bug (MySQL injection vulnerability - attacker can trick admin to reset rules acceptance status for all members)
-Group membership checking works now for supplementary usergroups too
-Several code improvements
v3.5.1 - Jul 22. 2007.
-Fixed bug (XSS Vulnerability)
v3.5.2 - Jul 23. 2007.
-Another security exploit fixed
v3.5.3 - Jul 25. 2007.
-Fixed bug where user is not properly redirected after accepting rules
v3.5.4 - Jul 25. 2007.
-Bug fixed where username info is not shown when going to reset acceptance status
v3.6 - Oct 14. 2007.
-Fixed bug where some mods are not able to reset acceptance status
-Improved javascript code to fix problems with the counter some users reported
-Minor bug fixes


If you like this hack please click INSTALL.


Rules page demo: http://www.bihforum.com/misc.php?do=cfrules

[NiTRoN]

Thanks "Cyber" for your superb dedication to keeping our boards safe and fixing the exploits in record time.

[PersianImmortal]

The new 3.5.2 seems to have a bug in it - using a test account, I found that after the forum rules are accepted it doesn't redirect properly. I believe it's adding an extra amp; in the URL between the & and the subforum number for some reason, so you get an error saying 'invalid forum specified' when it tries to redirect.

/EDIT: When I searched for and removed the first five occurrences of amp; in the .xml file, and reimported it, it seems to work fine now. However I'm not sure if this opens up the exploit again or not.

/EDIT 2: This is on a VB 3.6.0 forum, so it may just be my VB version perhaps.

[princeedward]

thanks for the update bro cyb...

[Ev!L ErN!E]

wow that sure is alot of security risks..... should I be worried, lol but great job on keeping your hacks updated Cyb, I love the work you do man, keep it up!

[itsblack]

Originally Posted by PersianImmortal

The new 3.5.2 seems to have a bug in it - using a test account, I found that after the forum rules are accepted it doesn't redirect properly. I believe it's adding an extra amp; in the URL before the & and the subforum number for some reason, so you get an error saying 'invalid forum specified' when it tries to redirect.

/EDIT: When I searched for and removed the first five occurrences of amp; in the .xml file, and reimported it, it seems to work fine now. However I'm not sure if this opens up the exploit again or not.

/EDIT 2: This is on a VB 3.6.0 forum, so it may just be my VB version perhaps.

There's no problem by my forum. My VB version is 3.6.7.

[Mupetz]

Thanks for the update maestro

[Valter]

v3.5.3 - Jul 25. 2007.
-Fixed bug where user is not properly redirected after accepting rules

To upgrade: Import product XML allowing overwrite.

[Mrdby]

updated!!!!

[PersianImmortal]

Thanks very much for making that fix Cyb, I've tested 3.5.3 and it works perfectly now. Great work and thanks again for a great mod.

[Valter]

v3.5.4 - Jul 25. 2007.
-Bug fixed where username info is not shown when going to reset acceptance status