User Integration: 4images Gallery 1.7.2 + vB 3.5.4

=============================================
User Integration 4images 1.7.2 / vBulletin 3.5.x
=============================================

Copyright: ? 2002 Jan Sorgalla
Integration to vBulletin 2.x by Jan Sorgalla ?
Integration to vBulletin 3.0.1 by mtha
Integration to vBulletin 3.5.0 by mtha
Constribution:
Matrixgl for re-organize the hack
d1635d for adding the fix for 3.0.1
all others for comments and suggestions
=============================================
Hack version: 3.5.0.20051117
Compatible with vB 3.5.x and 4images 1.7.2
Translated Versions:
http://www.vbhacks-germany.com/forum...ead.php?t=1969
=============================================
Features:
=============================================
- Use vBulletin's user table instead of 4images.
- Forum's members can access and upload pictures (depends on permissions)
- Forum's admin can administrate the album (unless you do the EXTRA part)
- Display Who is browsing album, in the Forum's WhoisOnline list

=============================================
Changes and modifications
=============================================
4images file to replace: 5 (sessions.php, constants.php,admin/admin_global.php,templates/default/user_loginform.html)

Query to run: 0

* If you do EXTRA part, there're few queries to run, depends on what you want to do.

=============================================
Requirements:
=============================================
- vBulletin 3.5.0 installed and working
- 4images 1.7 fresh installed and working
- 4images and vBulletin are installed to use the SAME database
=============================================
Limitations:
- This is ONLY users integration. NO template/style integration.
- This hack use default usergroup for album level, there're only 4 levels of Guest, User awaiting, User, Admin. See Extra section at the end for other solution
- I didnt look at the "cooke path" and "cookie domain" yet, so it will use the default

=============================================
Notes before you install
=============================================
1. Back up the files before you edit.

2. 4images tables and vbulletin tables have to be in the same database.

3. If you run 4images and vBulletin under different subdomains,
for example http://4images.domain.com and http://vbulletin.domain.com,
you should use the following setting for vBulletin in

"vBulletin Options -> HTTP Headers and output":

#############################
Cookie Domain = .domain.com
#############################

Dont forget the dot at the beginning, and change domain.com to your domain. If you do not do this, you might experience a login problem.

4. If you delete users, you should delete the user first over the Control Panel of 4images
and after that over the Administration Panel of vBulletin.
This is neccessary to delete/modify all user-related data from the 4images database (images, comments, usergroups).

5. Its is highly recomanded that you use integration only with fresh new installations of 4images because of the following reason:
In the 4images user-table User A has the User-ID "1".
After integration 4images will use the user-table of vBulletin.
There, the User A has the User-ID "2" and User B the User-ID "1".
All images, comments and usergroup memberships are now "owned" by User B.

6. Lot of people are getting logged out after a certain period of time. This could be fixed by changing
"Session timeout in minutes" to "0" in the 4images control panel.
==============================================

==============================================
INSTALLATION (read intergrate-4image-vB35.txt for more detail)
=============================================

-------
Step 1: Edit the included sessions.php

Step 2. Edit the included constants.php

Step 3: Upload the files in UPLOAD folder to your album directory

Step 4: Import Product product-hao_wol_locations.xml from vB 3.5.0 adminCP product manager

-------------------
LOG:

20051117: clean up code, might have some small errors fixed.
20060410: modify for 4images172
-------
The End .

[Paprika]

I'm going to hate to have my gallery and foum have different user bases, but this bridge or whatever is having cookie problems for me, so bad I can't always log-in, and when i do it doesn't stay logged-in.

[obmob]

Well, hope this isn't a problem, i compared 1.7.1 hack with 1.7.2 files, this is the result, isn't the same as in 1.7.2 release by mtha, so make sure you save a copy in case you don't like how this works.

So far i don't have more complains about system kicking people out after a while. But i don't know, i think something is missing, and didn't attach login template cause i can't make it redirect to 4images.

Don't know why, but the new release by mtha isn't working for me.

[vBFreak]

*** Warning, important security hole fix ***

Since there's a sql injection security issue in sessions.php of 4images 1.7.1/1.7.2, V@no from 4images has also made an extra fix for the vBulletin users because they're also affected, even if the code to change on the 4images website seems to be not in the modified sessions.php the hole is in there in another line...

My gallery was affected and got sql injected by some spambots, so I think it's good for you to know that

Find:

  function get_session_id() {
    global $HTTP_GET_VARS, $HTTP_POST_VARS;
    if ($this->session_id = $this->read_cookie_data(COOKIE_PREFIX."sessionhash")) {
      $this->mode = "cookie";
    }
    else {
      if (isset($HTTP_GET_VARS[SESSION_NAME])) {
        $this->session_id = $HTTP_GET_VARS[SESSION_NAME];
      }
      elseif (isset($HTTP_POST_VARS[SESSION_NAME])) {
        $this->session_id = $HTTP_POST_VARS[SESSION_NAME];
      }
      else {
        $this->session_id = false;
      }
    }
  }

Replace it with:

  function get_session_id() {
    global $HTTP_GET_VARS, $HTTP_POST_VARS;
    if ($this->session_id = $this->read_cookie_data(COOKIE_PREFIX."sessionhash")) {
      $this->mode = "cookie";
    }
    else {
      if (isset($HTTP_GET_VARS[SESSION_NAME])) {
        $this->session_id = $HTTP_GET_VARS[SESSION_NAME];
      }
      elseif (isset($HTTP_POST_VARS[SESSION_NAME])) {
        $this->session_id = $HTTP_POST_VARS[SESSION_NAME];
      }
      else {
        $this->session_id = false;
      }
    }
    $this->session_id = preg_replace('/[^a-z0-9]+/i', '', $this->session_id);
  }

The original thread can be found here (my request for a vB fix is on page 2)

[kai3k]

Ok, thanks.

edited and works without any problems. :up:

[redlabour]

Does it works with vBulletin 3.6 BETA ?

[xec]

Hi, I am working with 4images 1.7.2 and vBulletin 3.5.4


One of the changes in sessions.php is

define('ALBUM_FOLDER','/album/'); //Your Album Folder WITH trailing slash

Does this mean the root of 4images gallery? I have installed 4images at the root (www.mydomain.com). So would I need to change that to(?):

define('ALBUM_FOLDER','http://www.mydomain.com/'); //Your Album Folder WITH trailing slash




Also, for constants.php it has

define('SCRIPT_URL', 'http://www.YOURWEBSITE.org/album'); //no trailing slash

So would I need to make that(?):

define('SCRIPT_URL', 'http://www.mydomain.com'); //no trailing slash

Since my 4images gallery is installed at www.mydomain.com

Thank you for your time.

[Blackmana]

Originally Posted by Paprika

My problem actually still presists too..

At first after the upgrade I thought it was working correctly but a day or two later I go back to the gallery and see myself logged-out. Then I goto the forum and it has me logged-in.

So I go back to the gallery and logg-in but still it doesn't see me as being logged in.

Even logging-out completely and logging back in won't get me in...

WTF

yes this problem me too... somebody help me please? I can't logg-in control panel, because i cant see control panel button (vbulletin is ok).. screen:

[obmob]

u.u i gave up with 4images... i really love it, but it's not the best to work with vB.

[vBFreak]

Hrm, any tests available with vB 3.5 and 4images 1.7.3 or even vB 3.6 and 4images 1.7.3 yet?

Would like to know if it works before I update at least to 1.7.3 which is recommended by 4homepages because of the fixed security holes and bugs...

[mtha]

Dear all,

Even though that I like 4images alot (I like it much more than most other script), I need to move to a different album management, that fit better with our website (not because of the intergration).

Besides, I dont really have much time spending on this, so, if there is anyone who is inspired enough by this hack, and by 4images, can take care of the intergration, and give support, that would really be great.

I try the best of what I can do, but I cant promise much

Thank you very much for all of your supports by using the intergration.

mtha.

PS. If no one want to work on the matter, I promise I will clean up the code, and change the way the integration work, so that it might work better.