The Arcive of Official vBulletin Modifications Site.

Simple vB User login and access control on non vB pages · **Released**: 11-16-2005

Hack Description

This is a cutdown version of the user authentication and access control system I use on the non vB pages on my website.

This uses the vB 3.5 login system to log you in and out. It allows you to move between your forums and other pages on your site while remaining logged in.

It allows you to do things such as restrict pages by usergroup, display different content depending on a user being logged in or not.
For example, you can have banner Adds displying to non members only, and/or let members access to specific content.

Ive cut it down to the bare minimum that it needs to work, no fancy stuff such as avatars, PM's, or even formating.

I will try and offer support, but work and family commitments mean I dont have much free time.

This code is a mix of my own, and pieces I have used from other hacks that are floating around.

This script has been confirmed as working on

vB 3.5.x - All Versions

Changelog

Version 1.30 (24th April 2007)

Fixed - // in paths bug
Fixed - Javascript warning in some browsers
Fixed - Tidied up some code

Version 1.20 (2nd December 2006)

Fixed Logout incorrect path bug
Made change to reduce compatibility problems with foreign scripts

Version 1.10 (4th Feb 2006)

Changed login_inc.php so you only need to edit path in one place now.
Added more commenting to login_inc.php
Added usage instructions to instructions file
Added troubleshooting guide with all common problems and fixes to instructions file.

Note: It is NOT necessary to update from 1.0 to 1.10.
There is no functionality changes or bug fixes between these 2 releases.

Version 1.0 (17th November 2005)

Initial Release

Deluxe Version of this hack is now available
Has Avatars, PM's, Number of Posts etc.

Click Here

Click on Install
If you have this script installed then please click on the install link because;

You will get notified if any security issues are reported.
You will get notified when there are any upgrades to this script
It gives me a warm fuzzy feeling and motivates me to develop more

Donations
First of all, to be clear. This script is 100% free.

However if you feel an urge to donate I'm not going to say no.

Donations can be made at http://www.billspaintball.com/vb3/bd_donate.php

Snatch · #**122** 03-22-2006, 10:36 AM

I get this Error

Code:

Notice: Undefined index: HTTP_REFERER in /var/www/web1/html/vb3/includes/class_core.php on line 1574

And this ist my index.php

PHP Code:


			
<?php

chdir('/var/www/web1/html/vb3');  

require_once('/var/www/web1/html/vb3/global.php');  

?>

<html>  

<body>  

<?php

/************************************************\

 * File Uploader

 * **********************************************

 * File Name    : index.php

 * Author       : Tuan Do @ [url]www.celerondude.com[/url]

 * Email        : [email]dork@celerondude.com[/email]

 * Purpose      : load actions

\************************************************/



 require_once('/var/www/web1/html/test/login_inc.php');

   

//-----------------------------------------------

// Initialize some stuff

//-----------------------------------------------

ob_start('ob_gzhandler');

error_reporting(E_ALL);

define('UPLOADER', 1);



//-----------------------------------------------

// Require neccessary files and initialize objects

//-----------------------------------------------

require_once('includes/common.inc.php');

require_once('includes/template.class.php');

require_once('includes/functions.inc.php');

$Template = new Template('templates');

$Template->_cache = 1;

$Template->_cache_dir = 'cache/';

$start = timer();





  

//-----------------------------------------------

// Load the settings file

//-----------------------------------------------

$Settings = load_file($settings_file);





//-----------------------------------------------

// Files to include and the action

//-----------------------------------------------

$includes = array(

                    'default'               => 'uploader.php',

                    'login'                 => 'login.php',

                    'logout'                => 'logout.php',

                    'register'              => 'register.php',

                    'lostpassword'          => 'lostpassword.php',

                    'browse'                => 'browse.php',

                    'viewfiles'             => 'viewfiles.php',

                    'changepassword'        => 'changepassword.php',

                );

if( !isset($_GET['action']) || empty($_GET['action']) || !isset($includes[$_GET['action']]) )

{

    $action = 'default';

}

else

{

    $action =& $_GET['action'];

}



//-----------------------------------------------

// Authenticate user

//----------------------------------------------- 

$banned [] = 'x.x.x.x';

$banned [] = 'x.x.x.x';

$banned [] = 'x.x.x';



if ( in_array ( $_SERVER['REMOTE_ADDR'], $banned ) )

{

    show_message('Access Denied', 'Your IP address has been restricted from accessing this uploader.', 1);



    $Template->display('index.tpl');

    

    exit;

}

$logged_in = 0;

if($Settings['password_required'] && $action != 'register' && $action != 'lostpassword' && $action != 'login' && $action != 'lostpassword')

{

    session_start();

    if(!isset($_SESSION['uploader_username']))

    {

        if(isset($_COOKIE['uploader_userid']) && isset($_COOKIE['uploader_password']))

        {

            $user = authenticate_by_id($_COOKIE['uploader_userid'], $_COOKIE['uploader_password']);

            if(!$user)

            {

                $action = 'login';

            }

            else

            {

                $logged_in = 1;

                $current_user = $user['username'];

                $Template->assign('logged_in', 1);

            }

        }

        else

        {

            $action = 'login';

        }

    }

    else

    {

        $current_user = $_SESSION['uploader_username'];

        $logged_in = 1;

        $Template->assign('logged_in', 1);

    }

}





//-----------------------------------------------

// Load action file.

//-----------------------------------------------

require( 'includes/' . $includes[$action]);



//-----------------------------------------------

// Included files made changes to the template

// Now print everything

//-----------------------------------------------

if($Settings['password_required'] && !$logged_in)

{

    $Template->assign('noheader', 1);

}



$Template->assign('runtime', timer($start) );

$Template->display('index.tpl');

?>

</body>  

</html>

GreeTz
Snatch

nestoras · #**123** 04-06-2006, 01:15 AM

i have just install this!
1 problem!
i have this too
i have done everything you say but no fix!

Billspaintball · #**124** 04-14-2006, 01:26 PM

Sorry about the lack of support.
We have just had a new addition to the family 3 weeks ago and Ive been kinda busy.

Billspaintball · #**125** 04-14-2006, 01:32 PM

Quote:

Originally Posted by Snatch

I get this Error

I think its almost certainly a conflict because of something else you have on the page.

Have you tried section 5 of the troubleshooting guide to rule out other scripts interfearing?

Spinball · #**126** 04-21-2006, 11:13 PM

I'm having the same problems.

PHP Code:


			
<?php

   chdir("/home/sites/avforums/public_html/forums");

   require_once('../forums/global.php');  

require_once('/home/sites/avplay/public_html/login_inc.php');

$allowed_userids = "1";

$allowed_users = explode(",",$allowed_userids);

if (!(in_array($vbulletin->userinfo['userid'],$allowed_users))) {

   echo ("<P align='center'>Sorry but you do not have permission to access this page.</P>");

   include ("/home/sites/avplay/public_html/footer.php");

   exit();

}



chdir("/home/sites/avplay/public_html");

...avforums.com and avplay.com are both on the same server and AV Forrums has been set up with the cookie path being / and cookie domain being .avforums.com.

Keeps saying I'm not allowed in, and when I print_r $vbulletin->userinfo is returns a userd of 0.
Help!

Billspaintball · #**127** 04-22-2006, 04:56 AM

Have you tried just the sample code in "Troubleshooting - step 5" yet?
(refer to this post https://vborg.vbsupport.ru/showpost....98&postcount=2 )

If so, what happened?

Spinball · #**128** 04-22-2006, 07:38 AM

Quote:

Originally Posted by Billspaintball

Have you tried just the sample code in "Troubleshooting - step 5" yet?
(refer to this post https://vborg.vbsupport.ru/showpost....98&postcount=2 )

If so, what happened?

Yep - the same happened. Using vB 3.5.4

PHP Code:


			
<?php 

chdir('/home/sites/avforums/public_html/forums'); 

require_once('/home/sites/avforums/public_html/forums/global.php'); 

?> 

<html> 

<body> 

This is a heading<br /> 

This is some more stuff <br /> 

And another line<br /> 

You get the idea<br /> 

Just place stuff as you normally would with HTML<br /> 

I use CSS to style and position on my site fwiw<br /> 

<br /> 

How about we put the login box right under here?<br /> 

<br /> 

<?php 

    require_once('/home/sites/avforums/public_html/login_inc.php'); 

print_r($vbulletin->userinfo);



?> 

</body> 

</html>

Uploaded to www.avforums.com it works perfectly. Uploaded to www.avplay.com it does not. I get the 'Thanks for loggin in' message followed by the login request.
The contents of $vbulletin->userinfo are not being filled when the script is on avplay.com.

Billspaintball · #**129** 04-23-2006, 11:11 AM

Im pretty sure its related to cookies somehow.

Do both your forums use the same cookie prefix?

Spinball · #**130** 04-23-2006, 11:21 AM

Quote:

Originally Posted by Billspaintball

Im pretty sure its related to cookies somehow.

Do both your forums use the same cookie prefix?

I agree with you Bill. AVPplay.com is not a forum and there is no cookie manipulation on the website.

Spinball · #**131** 04-27-2006, 06:39 PM

Anyone got any ideas on this one? Can this hack work on a website on the same server but with a different domain?

Billspaintball · #**132** 05-02-2006, 10:46 PM

Did you try the edit at the end of step 4 in troubleshooting?

Weirdwolf · #**133** 05-15-2006, 03:52 PM

I'm trying to restrict access to pages based on Usergroups, but I can't figure out what I shoud do with the code you provided. I have tried it in different locations on the page, but whether I'm logged in or not it always shows me the page. Any help? (The user login works perfectly for me, btw.)

Billspaintball · #**134** 05-16-2006, 12:15 AM

Quote:

Originally Posted by Weirdwolf

I'm trying to restrict access to pages based on Usergroups, but I can't figure out what I shoud do with the code you provided. I have tried it in different locations on the page, but whether I'm logged in or not it always shows me the page. Any help? (The user login works perfectly for me, btw.)

post a sample of your page and what you are trying to do, so we can have a look at it.

Weirdwolf · #**135** 05-16-2006, 01:23 AM

Right now I have it at the top of the page, and I'd like to restrict this page's access to those who attend here only. I've also tried replacing the 'Have stuff for here' with the content of the page, and that didn't work either. I realize I must be missing the obvious, but I'm just stumped at this point. Thanks for any help.

PHP Code:


			
<?php
   chdir('forums'); 
   require_once('forums/global.php');  
?>
<?php
if ($vbulletin->userinfo['usergroupid'] == '9' )
    {
    echo "Have stuff for here";
             } else {
             echo "You do not have permission for this page"; }
    ?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">


<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>Richmond church of Christ Member Services</title>
<style type="text/css">
<!--
body,td,th {
    font-family: Verdana, Arial, Helvetica, sans-serif;
    font-size: 12px;
}
body {
    background-color: #0066FF;
}
#Layer1 {
    position:absolute;
    left:11px;
    top:8px;
    width:25px;
    height:70%;
    z-index:1;
    background-color: #0000FF;
}
#Layer2 {
    position:absolute;
    left:52px;
    top:19px;
    width:8px;
    height:90%;
    z-index:2;
    background-color: #0000FF;
}
.style1 {
    font-size: 14px;
    font-weight: bold;
}
.style3 {font-size: 10px}
-->
</style>
<link href="siteCSS.css" rel="stylesheet" type="text/css" />
</head>

<body>
<p align="center"><img src="images/memserv.gif" width="484" height="37" align="middle" /></p>
<table width="80%" border="4" align="center" bordercolor="#999999" bgcolor="#FFFFFF">
  <tr>
    <td><table width="100%" align="center">
      <tr>
        <td width="50%" align="left" valign="top"><p>Welcome to the Richmond church of Christ Member Services area. Here you will find special areas and information specifically <em>for</em> members attending here in Richmond</p>
          
          <p><?php include('login_inc.php'); ?>&nbsp;</p></td>
          
        <td width="50%" align="left" valign="top"><p align="center" class="style1">Church News &amp; Announcements </p>
          <p>
            <?php include('news/index.php'); ?>
          &nbsp;</p></td>
      </tr>
    </table>
      <p align="center"><span class="style3">&copy;2006 Richmond church of Christ, Richmond, Kentucky, United States 40475 </span></p>
    </td>
  </tr>
</table>
</body>
</html>

Billspaintball · #**136** 05-16-2006, 04:21 AM

Ok, I see whats gone wrong.
The "have stuff here" line is where you put your page contents.
For example;

PHP Code:


			
<?php

   chdir('forums'); 

   require_once('forums/global.php');  

?>

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">

<html xmlns="http://www.w3.org/1999/xhtml">

<head>

<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />

<title>Richmond church of Christ Member Services</title>

<style type="text/css">

<!--

body,td,th {

    font-family: Verdana, Arial, Helvetica, sans-serif;

    font-size: 12px;

}

body {

    background-color: #0066FF;

}

#Layer1 {

    position:absolute;

    left:11px;

    top:8px;

    width:25px;

    height:70%;

    z-index:1;

    background-color: #0000FF;

}

#Layer2 {

    position:absolute;

    left:52px;

    top:19px;

    width:8px;

    height:90%;

    z-index:2;

    background-color: #0000FF;

}

.style1 {

    font-size: 14px;

    font-weight: bold;

}

.style3 {font-size: 10px}

-->

</style>

<link href="siteCSS.css" rel="stylesheet" type="text/css" />

</head>



<body>





<?php include('login_inc.php'); ?>



<?php

if ($vbulletin->userinfo['usergroupid'] == '9' )

    {

    echo "

             <p align=\"center\"><img src=\"images/memserv.gif\" width=\"484\" height=\"37\" align=\"middle\" /></p>

<table width=\"80%\" border=\"4\" align=\"center\" bordercolor=\"#999999\" bgcolor=\"#FFFFFF\">

  <tr>

    <td><table width=\"100%\" align=\"center\">

      <tr>

        <td width=\"50%\" align=\"left\" valign=\"top\"><p>Welcome to the Richmond church of Christ Member Services area. Here you will find special areas and information specifically <em>for</em> members attending here in Richmond</p>

          

          <p>nbsp;</p></td>

          

        <td width=\"50%\" align=\"left\" valign=\"top\"><p align=\"center\" class=\"style1\">Church News &amp; Announcements </p>

          <p>";

            

include('news/index.php'; 

         

echo " &nbsp;</p></td>

      </tr>

    </table>

      <p align=\"center\"><span class=\"style3\">&copy;2006 Richmond church of Christ, Richmond, Kentucky, United States 40475 </span></p>

    </td>

  </tr>

</table>";



} else {

             echo "You do not have permission for this page"; }

    ?>



</body>

</html>

I havent tested the code cos Im at work.
I may have missed escaping a " somewhere (I have a habit of doing that) but you should get the idea of how it works.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.16042 seconds Memory Usage 2,447KB Queries Executed 30 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)bbcode_code (5)bbcode_php (4)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (16)post_thanks_box (16)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (16)post_thanks_postbit_info (15)postbit (16)postbit_onlinestatus (16)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!