Password Non VB Pages Using VB Member Info

This works on ALL VB version

This was created by an Admin (CyberGaf) on my site for the simple reason we wanted to make non vbull pages passworded and available only to members.

The full install details are in the zip file and TBH if you cant get this up and running its time to give up.

This can also be used on html pages I am told but have not tried it.

You can even set which user groups are allowed to view the page.

# Vbulletin GROUP ID's
# default setting = Admin & Super Moderators
#
# 1 Unregistered / Not Logged In
# 2 Registered
# 3 Users Awaiting Email Confirmation
# 4 (COPPA) Users Awaiting Moderation
# 5 Super Moderators
# 6 Administrator
# 7 Moderators
# 8 Banned
# 9 Moderated
# 10 Gold Member
# 11 Platinum Member

Please note the above usergroups are for our forums and therefor will not be available on your forum.

Or by changing usergroupid = '5') to userid ='users id') you can set the script to allow only specific users to view the pages.

This is not so much a hack but a handy little addon and it DOES work.

HM

[glo]

What will it display on Whose online?

[Hialls]

Originally Posted by blkthndr

These are the only lines I changed and it works for me with 3.0.0 Gold:

// Formulate the query
// Get rid of these 4 lines or comment them out:
# if ($encryptedpw)
# $chkpw = md5($PHP_AUTH_PW);
# else
# $chkpw = $PHP_AUTH_PW;
// Keep this line
$sql = "SELECT * FROM user WHERE
// Keep this line
username = '$PHP_AUTH_USER' AND
// get rid of this line
# password = '$chkpw' AND
// add this line
password = MD5(CONCAT(MD5('$PHP_AUTH_PW'), salt)) AND usergroupid = '6'";

Works 100% except.. i try and do "AND usergroupid = '6' or usergroupid = '5'"
and it seizes to work... any idea/

[blkthndr]

Verify the group is correct, my group 6 might not be your group six. Also make sure *you* or the id you are authenticating with is in the group specified.

[my username]

Why use basic auth over cookies?
When using cookies you're at least abel to hash the values stored in the cookies (sent from user agent -> server in each http request).

When using basic auth., the username + password are sent in clear text to the server (for every http request). So basically this is lowering the application security (at least unless you're using secure http, tls or ssl)...

HTTP Authentication: Basic and Digest Access Authentication

[Pheonix]

Does this work with VB3.0.0 GOLD..

TIA

-Pheonix

[MeTaL_oRgY]

Sweet hack!! I see I?m not the only one who thinked about this! I haven?t tried it, but it should work (I saw the source)...

If anyone uses a windows server and need something like this (protect non vB pages, get login-box on non vB pages, etc. etc.) there are some other hacks out there (mine for example).... remember, the good thing about this foum is the ability to choose and get the hack that suits best your site ...

Here?s another hack that could work on Windows Systems

Good luck . I?ll try this out and let you know how it went

[EDIT] I installed and I have to say.. Works great!!! ... nice job

[xeonkiller711]

Can someone compile a VB3 working hack? I have tried what you all said nothing works! Thanks!

[xeonkiller711]

Also do I need a htaccess file in the folder?

[xeonkiller711]

I can log in but I get this error:

Unable to execute query.

[glo]

Originally Posted by glo

What will it display on Whose online?

anyone?