Trap Banned Members: They cant logout.

Hey there,

This is a very tiny (and very easy to install) hack but I like to use it and found it useful:

I have a certain user group for trouble users in my board which I disabled all access to my board and this group can not even search or display the board itself or anything, so they are lower than guests. So I need to trap them in their username so that they wouldnt log out and "gain" guest access. This tiny hack exactly does this. You can use it with "banned users" or any user group you need to trap. Here we go:

Edit member.php and find
-- cut ---
// ############################### start logout ###############################
if ($action=="logout") {
include("./global.php");
-- cut ---

AFTER THAT add:
-- cut --
// Banned users cant logout hack
if ($bbuserinfo[usergroupid]==XX) {show_nopermission(); exit;}
// Banned users cant logout hack
-- cut --

Replace XX with any usergroup id. (Banned by Moderators group is 12 in my board). If you put your mouse icon on "Edit" in http://www.url.com/yourboardadmin/us...tion=modify&s= , you can learn the usergroupid of any groups. If you need to trap more than 1 usergroups use this line:

if ($bbuserinfo[usergroupid]==XX OR $bbuserinfo[usergroupid]==YY) {show_nopermission(); exit;}

After applying the hack, trapped users will get "You dont have access" page if they try to logout from anywhere. Of course these members can still clear the cookies by deleting them manually, but you'll stop 95% of members who dont know the trick anyway!

Enjoy!

Logician //=^))

[Logician]

Originally posted by IceMalee

thats just how it looked after copy/paste, everything i did was just how u had it in the instructions

IceMalee, there are 3 lines in my original code, 2 in your code.

Technical Info: Lines begining with // are Remark/Comment lines in PHP and they are disregarded while the code is parsed. So line 1 and 3 are just comment lines which has nothing to do with the hack. The line that does the trick is line 2 and if you dont make it a new line (as in my code), it will be a part of comment line and will be skipped. This is what happened to you.

Anyway, does it work now?

Regards,
Logician

[Keyser S?ze]

working now, i changed the 09 to just 9, and that made it work fine

thanks

[Tigga]

Well I tried this hack and got to use it today. It took the user about an hour to figure out a way around it. All you have to do is register a new account when you get the error message...

[Logician]

Originally posted by PlurPlanet
Well I tried this hack and got to use it today. It took the user about an hour to figure out a way around it. All you have to do is register a new account when you get the error message...

You can:
1- Disable "new registrations if user has an account" setting in vb settings.
2- Use the hack that disables Register link if user is logged in. (dont remember the exact name)
3- Use this hack to track them..

As I said in the original message this hack cant stop expert users anyway but for a newbie it works well..

[rylin]

I seriously don't understand the people that complain that "it isn't working, my users can get around it in a matter of minutes!"...
First of all, Logician has already stated (quite a few times, might i add) that it's for n00bs etc. who don't have a clue as to how the system works.

YES, it's possible to go around it by using another browser
YES, it's possible to go around it by deleting your cookies

so? there will always be clueless people who don't know what struck them

You complain that 60% of your users know how to get around it?
Are you sure you wouldn't just want the other 40% back on your forums as well?

Logician: nice hack.
Simple, clean & pretty effective.
Keep it up

[Schorsch]

does this work without problems on 2.2.6 ?

[Logician]

Originally posted by Schorsch
does this work without problems on 2.2.6 ?

yep it works with 2.2.6 too..

[dm02]

anyone tried it with 2.2.7 ???? Code looks different than whats in the find field

if ($action=="logout") {
$templatesused = 'error_cookieclear';
include("./global.php");
vbsetcookie("bbuserid","",1);
vbsetcookie("bbpassword","",1);
vbsetcookie("bbstyleid","",1);

Anyone know if this hacks code needs to be altered to work in 2.2.7????

Thanks
DM

[Logician]

Originally posted by dm02
anyone tried it with 2.2.7 ???? Code looks different than whats in the find field. Anyone know if this hacks code needs to be altered to work in 2.2.7????

It works with 2.2.7 too.. Just add the hack code right after

PHP Code:

include("./global.php"); 


[ZiRu$]

damn......so even if they clear cookies and all references to my site they still cant log out?