Go Back   vb.org Archive > Community Central > vBulletin.org Site Feedback
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 02-06-2007, 06:20 AM
Neal-UK's Avatar
Neal-UK Neal-UK is offline
 
Join Date: Feb 2004
Location: Lancashire, England
Posts: 604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default vbBux & vbPlaza Removal

Thanks for letting me know of the exploit, but now vb.org have removed the mod altogether from vb.org, I have no idea what files I must remove off my server and what changes I can revert to already modified templates.

When removing a hack, is it not advisable to leave a list of the files and where they would normally be uploaded to as well as the instructions for install / uninstall?
Reply With Quote
  #2  
Old 02-06-2007, 06:31 AM
rjmjr69's Avatar
rjmjr69 rjmjr69 is offline
 
Join Date: Jan 2007
Location: Southie
Posts: 876
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Well you should really keep a history of changes theres actually a built in feature that allows you to I guess basicaly take a snap shot of the before.... Just a suggestion for future installs. And I still have the complete install files I'll up the read me just reverse your steps.




http://rapidshare.com/files/15151802/readme.txt.html

Sorry I do not usually use RapidFire I hate it but my normal host are doing upgrades to the software and server. I normally use http://www.mediafire.com

Well hope this helps you out.
Reply With Quote
  #3  
Old 02-06-2007, 06:35 AM
Neal-UK's Avatar
Neal-UK Neal-UK is offline
 
Join Date: Feb 2004
Location: Lancashire, England
Posts: 604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Can you send me the read me or attach it to this thread for the install please if you don't mind. I do keep a history, in my installed hacks section on vb.org....
Reply With Quote
  #4  
Old 02-06-2007, 07:01 AM
hitboy hitboy is offline
 
Join Date: Jan 2007
Posts: 58
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

so whats wrong with vbbux its hackable or something? What other options are there besides icash??? For the latest version of VB?
Reply With Quote
  #5  
Old 02-06-2007, 07:15 AM
Neal-UK's Avatar
Neal-UK Neal-UK is offline
 
Join Date: Feb 2004
Location: Lancashire, England
Posts: 604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by rjmjr69 View Post
Well you should really keep a history of changes theres actually a built in feature that allows you to I guess basicaly take a snap shot of the before.... Just a suggestion for future installs. And I still have the complete install files I'll up the read me just reverse your steps.




http://rapidshare.com/files/15151802/readme.txt.html

Sorry I do not usually use RapidFire I hate it but my normal host are doing upgrades to the software and server. I normally use http://www.mediafire.com

Well hope this helps you out.
That's much appreciated, thankyou. :up:

Can you let me know what files went where so they can all be removed? Thanks again.
Reply With Quote
  #6  
Old 02-06-2007, 07:22 AM
Zia's Avatar
Zia Zia is offline
 
Join Date: Dec 2005
Location: golpo.net
Posts: 931
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

mmm what kinda exploit detected there ?

been long time we r on vbux..
removing it will be a reason of huge qus from users
Reply With Quote
  #7  
Old 02-06-2007, 07:27 AM
Neal-UK's Avatar
Neal-UK Neal-UK is offline
 
Join Date: Feb 2004
Location: Lancashire, England
Posts: 604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I think just disabling it will be enough.
Reply With Quote
  #8  
Old 02-06-2007, 07:36 AM
Mudvayne's Avatar
Mudvayne Mudvayne is offline
 
Join Date: Dec 2005
Location: /dev/null/
Posts: 393
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Neal-UK View Post
Can you let me know what files went where so they can all be removed? Thanks again.
You can disable the modification & use it again when someone provide a fix . Why you want to uninstall as that 'll remove every data?
Reply With Quote
  #9  
Old 02-06-2007, 07:40 AM
Neal-UK's Avatar
Neal-UK Neal-UK is offline
 
Join Date: Feb 2004
Location: Lancashire, England
Posts: 604
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Not worth the risk to be honest, and i've only in the last week installed it on the site. I used to run it on another but got fed up of the template changes, etc when a new vb came out, so to be honest i'd rather just get rid.

It's a good hack, just too many things to mess with when there's an update to the forums, etc....
Reply With Quote
  #10  
Old 02-06-2007, 11:07 AM
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Location: Nottingham, UK
Posts: 23,748
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Artificial_Alex reported an exploit which we investigated and confirmed - not only that but the investigations revealed other exploits in the code as well. As per our policy on such matters, the modification has been removed until such time as the holes are fixed.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 10:45 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04464 seconds
  • Memory Usage 2,256KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete