Moderators Functions - vbAccessDenied

Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (Thanks to alluidh)

Features:

• Fully Phrased.
• Turn on or off in admin cp.
• Created a custom message for any vBulletin generic access denied message.
• Personalize messages with any user, forum or usergroup information.
• Automatically send a PM to one or more users the first time a member receives a specific access denied message.
• Personalize the PM with any user, forum or usergroup information.
• Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
• Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
• Several layers of security.

Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install

1. Download the vbAccessDenied_1.0.zip file.
2. Unzip and upload the files in the upload directory to your forum root.
3. Import the product file in your admincp.
4. Create custom messages as desired.

1.1 Changes

1. Supports bbcodes in messages (see updated screen shot).
2. Fixed sql bug that prevented many messages from showing properly.
3. Removed 255 character limit on messages.

Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

[hambil]

LOL - I do that all the time. It's hard to keep track sometimes

[Tyegurl]

one last thing.... how do i get it to automatically add the forum title and user's name? i am not too quick on this stuff

and yes with the correct version i got the message. sorry about that.

[hambil]

Originally Posted by Tyegurl

one last thing.... how do i get it to automatically add the forum title and user's name? i am not too quick on this stuff

and yes with the correct version i got the message. sorry about that.

One of the screen shots has some nice examples. Basically, any forum or user or usergroup data can be used. You put them in {} in the message.

Username would be {user.username}
and the forum would be {forum.title}

I'll put up a complete list of the standard vb ones tomorrow - but if you have installed hacks that add to the forum or user or usergroup table, you can also use those values too.

[Delphiprogrammi]

hi,

this doesn't work and throws an error every time you hit "messages" in the admincp navigation

Invalid SQL:

SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM vb3_accessdenied_message
LEFT JOIN vb3_usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN vb3_forum ON forum.forumid = accessdenied_message.forumid;

MySQL Error : Unknown table 'accessdenied_message'
Error Number : 1051
Date : Thursday, March 30th 2006 @ 07:00:54 AM
Script : http://*******/testvb/admincp/access....php?do=modify
Referrer : http://*******/testvb/admincp/index.php?do=nav
IP Address : ******
Username : ******
Classname : vb_database

[hambil]

Originally Posted by Delphiprogrammi

hi,

this doesn't work and throws an error every time you hit "messages" in the admincp navigation

Unknown table means it didn't install properly for some reason. I have no idea why. What version is your MySQL?

[Delphiprogrammi]

Originally Posted by hambil

Unknown table means it didn't install properly for some reason. I have no idea why. What version is your MySQL?

MySQL 4.1.14-standard

[hambil]

Can you remove the line $db->hide_errors() from the product xml and try importing it again? Tell me what, if any error you see?

[Delphiprogrammi]

Originally Posted by hambil

Can you remove the line $db->hide_errors() from the product xml and try importing it again? Tell me what, if any error you see?

verry strange here is no error message ......

PHP Code:

$msgs = $db->query_read("
        SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
        FROM " . TABLE_PREFIX . "accessdenied_message
        LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
        LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
    "); 


that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing

[hambil]

Originally Posted by Delphiprogrammi

verry strange here is no error message ......

PHP Code:

$msgs = $db->query_read("
        SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
        FROM " . TABLE_PREFIX . "accessdenied_message
        LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
        LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
    "); 


that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing

There is no field call accessdenied_message - it's the table name.

[hambil]

Ah...
I may see the problem - though why it hasn't caused anyone else trouble I don't know. Let me try a quick fix.