Go Back   vb.org Archive > vBulletin Modifications > Archive > vB.org Archives > vBulletin 2.x > vBulletin 2.x Full Releases
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools
Away Security Hack... Details »»
Away Security Hack...
Version: 1.00, by Chris M Chris M is offline
Developer Last Online: Feb 2013 Show Printable Version Email this Page

Version: 2.2.x Rating:
Released: 08-27-2002 Last Update: Never Installs: 7
 
No support by the author.

This should work on all 2.2.x versions...

I have tested it on 2.2.6, and a friend has on 2.2.7...

I was reminded about this by Arunan, and decided to make it a small hack

What it does :
Searches for a specific file in the Admin panel, and wont let the CP work with it there...

What it is useful for :
You can upload it before you go on holiday, so your cp cannot be accessed...

Files to edit : 1 (admin/global.php)
Files to add : 1 (secure.php)

Enjoy!

Its small, but simple!

Satan

Show Your Support

  • This modification may not be copied, reproduced or published elsewhere without author's permission.

Comments
  #2  
Old 08-28-2002, 08:31 PM
Chris M's Avatar
Chris M Chris M is offline
 
Join Date: Dec 2001
Location: Northampton, England
Posts: 6,186
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Here is the secure.php file...

Satan
Reply With Quote
  #3  
Old 08-28-2002, 08:34 PM
NTLDR's Avatar
NTLDR NTLDR is offline
Coder
 
Join Date: Apr 2002
Location: Bristol, UK
Posts: 3,644
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Sounds cool hellsaten, I have .htaccess protection, but this is still a good hack none the less. Thanks for sharing
Reply With Quote
  #4  
Old 08-28-2002, 08:41 PM
g-force2k2 g-force2k2 is offline
 
Join Date: Mar 2002
Location: Everywhere you wanna be..
Posts: 1,608
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

i guess you got the idea of off the install.php still being in the admin folder hellsatan ? or am i wrong... regards...

g-force2k2
Reply With Quote
  #5  
Old 08-28-2002, 08:55 PM
Brad Brad is offline
 
Join Date: Nov 2001
Posts: 4,765
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

hmm ive always just uploaded the install.php when i went away
Reply With Quote
  #6  
Old 08-28-2002, 09:01 PM
g-force2k2 g-force2k2 is offline
 
Join Date: Mar 2002
Location: Everywhere you wanna be..
Posts: 1,608
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally posted by Anime-loo
hmm ive always just uploaded the install.php when i went away
hopefully it was blank though because then someone could just reinstall a new forum right over yours regards...

g-force2k2
Reply With Quote
  #7  
Old 08-28-2002, 09:20 PM
DrkFusion's Avatar
DrkFusion DrkFusion is offline
 
Join Date: Nov 2001
Posts: 1,926
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I will be releasing my version maybe too
By the way I am Arunan

I did this as a joke and put warnings all over the page, but now I made it so it logs ips, and dates and so on.

Anyways, I click install
Reply With Quote
  #8  
Old 08-29-2002, 12:55 AM
Gohan's Avatar
Gohan Gohan is offline
 
Join Date: Nov 2001
Location: The Netherlands
Posts: 141
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Hmm.. If i'm back from holiday than i must need delete a secure.php from server??

Or i have better idea.. you could try make or i'll try make (just first need permisson from you)

AdminCP check to ON or OFF switch (like as closed board)
If you back from holiday than could you login to AdminCP

AdminCP check to your userid number (standard number 1) if correct number 1 than opened
Reply With Quote
  #9  
Old 08-29-2002, 08:58 AM
kmfdm_kid2000's Avatar
kmfdm_kid2000 kmfdm_kid2000 is offline
 
Join Date: Mar 2002
Location: Where Towers Crumble (NYC)
Posts: 89
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally posted by Gohan
Hmm.. If i'm back from holiday than i must need delete a secure.php from server??
Instead of deleting, try renaming?? That might work too...
Reply With Quote
  #10  
Old 08-29-2002, 12:48 PM
Chris M's Avatar
Chris M Chris M is offline
 
Join Date: Dec 2001
Location: Northampton, England
Posts: 6,186
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Yeh...

I am trying to integrate some of the code used in my guessword hack, to make it have 5 random words generated...

It will prompt you with which word to enter, like : "What is the name of your pet?" and if you enter it, you are given access...

@Gohan - If someone hacks your vB account, its not very secure if it asks for Id 1 is it?

Satan
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 03:02 AM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.05284 seconds
  • Memory Usage 2,288KB
  • Queries Executed 23 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)modsystem_post
  • (1)navbar
  • (6)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (9)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete