Go Back   vb.org Archive > vBulletin 3 Discussion > vB3 Programming Discussions
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 01-10-2010, 01:52 AM
Nintendo-Daily's Avatar
Nintendo-Daily Nintendo-Daily is offline
 
Join Date: Nov 2008
Posts: 311
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Authentication Issues

I have a vBulletin community that is using version 3.8.4. I also have a website that uses PHP and MySQL. The website has a link at the bottom for an Admin area I use as a back-end to add stuff to the website. When ever I login to my vBulletin, my site verifies my credentials and displays the link at the bottom. If an admin is not logged in, the link on the site (not vBulletin) will not appear. For some reason, even when I'm logged into vBulletin as admin, the link on the site doesn't appear anymore. It seems like I started having problems with the link on my site not appearing after I upgraded to a newer vBulletin update. Since I updated my vBulletin, does the authentication change? The page I'm trying to get to on the site uses this for authentication:

Code:
$userid = $_COOKIE["bbuserid"];
$cookiepassword = $_COOKIE["bbpassword"];
$license = "VBX_removed_X";

if(isset($_COOKIE["bbuserid"])){
            
if (!$link = mysql_connect($sqlserver, $sqluser, $sqlpassword)) {
    echo 'Could not connect to mysql';
    exit;
}

if (!mysql_select_db($forumdb, $link)) {
    echo 'Could not select database';
    exit;
}

$query="SELECT * FROM user WHERE userid=$userid";
$result=mysql_query($query);
$row = mysql_fetch_assoc($result);

$username = $row['username'];
$dbpassword = $row['password'];
$usergroupid = $row['usergroupid'];

$correct_cookie_pw = md5($dbpassword . $license);

if($cookiepassword == $correct_cookie_pw && $usergroupid == "6"){

Logged in

}else{echo "<p align=\"center\">Invalid login or you are not an administrator.<br /><br /><a href=\"Click">http://www.nintendo-daily.com/forums/login.php\">ClickClick"> here to login</a></p>";}

}else{echo "<p align=\"center\">You must be logged in as an administrator to access this area.<br /><br /><a href=\"Click">http://www.nintendo-daily.com/forums/login.php\">Click here to login</a></p>";}
If I try to go to that page directly, it says "Invalid login or you are not an administrator." The weird thing is, I can access and see the AdminCP link on my forums just fine whenever I'm logged in.

Any ideas?
Reply With Quote
  #2  
Old 01-10-2010, 02:59 AM
JamesC70 JamesC70 is offline
 
Join Date: Jun 2007
Posts: 219
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

If you're on 3.8.4 PL2, then the password salt has changed.

Open includes/functions.php and see the defintion in line 37.

Code:
Replace $license with the COOKIE SALT as found in includes/functions.php
Reply With Quote
  #3  
Old 01-10-2010, 03:13 AM
Nintendo-Daily's Avatar
Nintendo-Daily Nintendo-Daily is offline
 
Join Date: Nov 2008
Posts: 311
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

YAY!!!! It works!

Thanks very much JamesC70!!!
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 10:11 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.03454 seconds
  • Memory Usage 2,174KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_code
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (3)post_thanks_box
  • (3)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (3)post_thanks_postbit_info
  • (3)postbit
  • (3)postbit_onlinestatus
  • (3)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete