User Privileges on non-vB pages

[inthezone]

I am looking to make certain non-vB pages on my site accessible on various levels (i.e. Certain parts are displayed for Registered Users, additional parts are displayed for Mods/Admins, and Guests are brought to the vB login screen,) using the vBulletin cookie, but I have no idea about:

1) How to require the cookie for access.

2) How to make certain parts accessible to certain user-levels.

Any help would be greatly appreciated. Thanks

[Dean C]

Try these two hacks maybe?

http://www.vbulletin.org/hacks/index...ack&hackid=548

http://www.vbulletin.org/hacks/index...ack&hackid=282

- miSt

[inthezone]

Those seem to use sessions, and I am looking to use cookies so users don't have to re-login every time. I want to have users login/register from the vB board itself, while the non-vB pages verify the cookie generated by vB. Is using the vB cookie on non-vB pages relatively safe, or is it opening a potential 'can of worms' of security risks?

[Dean C]

Saw something about cookies in this thread:

https://vborg.vbsupport.ru/showthrea...threadid=43014

[inthezone]

That seems to just be a login portal for vB, but doesn't use the cookie for access to non-vB pages. What I am looking for (not a "hack" per se) is something that will allow me to do this on non-vB pages:

PHP Code:

//Not using literal PHP syntax

if (vBulletin cookie is present)
{

if (user is a registered user)
{echo Regular user content;}
elseif (user is a moderator)
{echo Mod content;}
elseif (user in an administrator)
{echo Admin-only content;}

}

else {echo "You must be a registered user to view this page. Please login or register";} 


[Logician]

I think you'll like WebTemplates

[inthezone]

I am not really looking to hack up my vB, especially since vB3 is due out any month now. I noticed this bit of code in the thread for your hack:

PHP Code:

<?php
// Default Information - Start with this
error_reporting(7);

$templatesused='forumhome_welcometext,forumhome_logoutcode,forumhome_newposts,forumhome_todayposts,forumhome_logincode';

require('./global.php');

$permissions=getpermissions();
if (!$permissions['canview']) {
    show_nopermission();
}
// Default Information - End

// if user is know, then welcome
if ($bbuserinfo['userid']!=0) {
  $username=$bbuserinfo['username'];
  eval("\$welcometext = \"".gettemplate('forumhome_welcometext')."\";");
  eval("\$logincode = \"".gettemplate('forumhome_logoutcode')."\";");
  eval("\$newposts = \"".gettemplate('forumhome_newposts')."\";");

} else {
  $welcometext = "";
  eval("\$newposts = \"".gettemplate('forumhome_todayposts')."\";");
  eval("\$logincode = \"".gettemplate('forumhome_logincode')."\";");
}

eval("dooutput(\"".gettemplate('home')."\");");


?>

Would something like this be adequate for permissions on non-vB pages?

[Logician]

If you are ready to manually edit/update permissions per .php file without any user interface for administration, yes you can just insert:

PHP Code:

require('./global.php'); 


at the begining of your .php file (assumed its in the forum dir), then check the permissions with "if" commands like:

PHP Code:

if ($bbuserinfo['userid']>0) 
{
//do something
}
else
{
//do another thing
} 


etc.

[inthezone]

Is it possible to do this using a file that is not in my forums directory?

My directory structure is:

public_html
-forums
---admin
---images
---mod

I'm getting this error

PHP Code:

Warning: main() [function.main]: Unable to access ./admin/config.php in /home/virtual/www/public_html/forums/global.php on line 129

Warning: main(./admin/config.php) [function.main]: failed to create stream: No such file or directory in /home/virtual/www/public_html/forums/global.php on line 129 


and I'm using this code to get the global.php file:

PHP Code:

require('/home/virtual/www/public_html/forums/global.php'); 


[Logician]

PHP Code:

chdir('/home/virtual/www/public_html/forums/');
require('./global.php');