Well, I was browsing the web and came across "hacks" for vBulletin. The modification sounded interesting so I downloaded it. Since it didn't come from vBulletin.org, I decided to check out the the PHP code for the hack because it looked kinda suspicious. When I looked into the code, when you logged into the panel to install the hack, your admin login / pass was sent to some email address.
Just a word of caution for people when using hacks, especially those you find outside vBulletin.org, people can easily implement something to catch your passwords into the install script or the actual hack itself. Hope this helps someone down the road.
[edit]Mental note to self: Don't post the code on the forums cause people might just put it in their hacks[/edit]
in the code, once you have their password hash and userid you can just edit your cookies and put in the values, vBulletin will just read the password hash and userid and let you in.
I always use official sites for updates and installations, for VB I will only get the codes from trusted sources like here and the vbulletin.com site and of course friends that have php code knowledge,
thanks for putting the warning up as this would be a caution....for members that may have downloaded these hacks and not checked the coding like Gamingforce has, thanks Gamer.....
05-07-2002, 01:01 AM
Watch out for vB hacks outside this place.
Linear Mode
