The Arcive of Official vBulletin Modifications Site.

About Developer · **Released**: 03-07-2003

/////

members can create styles/templates/replacements through Mod CP by usergroup

/////

By mx3

/////

Creds to Storm for partial hacking, help, and support.

/////

What this hack does is basically let anyone in the usergroup you
specify add/remove/edit styles, replacements, and templates through
the mod cp (obviously the member must have access to the mod cp, so
make sure the group you specify is either the mod group or super mod group)

/////

Files to edit:

mod/index.php

Files to add:

mod/style.php
mod/template.php
mod/replacement.php

/////
this is my first hack! i hope that you like it! please click the install button if you use it!

mx3 · #2 03-08-2003, 01:42 AM

screenshot of mod cp

none others are really needed, its the same as in the admin cp only its now in the mod cp...

FleaBag · #3 03-08-2003, 02:55 AM

Nice hack, a similar one came out in the past - but the problem that existed there also exists here, the user could delete your entire database with this kind of access. If you 100% trust your moderator not to do this then I guesse it's great, but then again if you 100% trust them, you might as well make them an admin.

mx3 · #4 03-08-2003, 02:57 AM

I see your point. i will try to revise this hack and fix that prob.

uh-oh...this hack worked for me before...for some reason i'm getting parse errors noww

no one install! it is unstable! i'll try to fix, if a mod sees this delete this hack out of the DB and forum! i'll post it again when it is fixed!

Xenon · #5 03-08-2003, 10:24 AM

have deleted it out of the db and moved it to the beta hacks forum.

as for security: change the hack in a way that these mods CAN NOT edit phpinclude templates

mx3 · #6 03-08-2003, 01:36 PM

thank you, xenon, i will try. i'm still learning php, i did'nt even really know it when i made the hack. Storm helped a lot, as it says in the credits.

SZ|TalonKarrde · #7 03-08-2003, 06:30 PM

Brad fixed his hack to remove the security hole, but then, as far as I know, he either lost interest in the hack and never updated it, or lost the data. I'll bug him about how to fix it later today.

Link14716 · #8 03-09-2003, 10:36 PM

Code:

..... AND title!='phpinclude' ......

blackice912 · #9 03-10-2003, 06:10 AM

Quote:

Originally posted by SZ|TalonKarrde
Brad fixed his hack to remove the security hole, but then, as far as I know, he either lost interest in the hack and never updated it, or lost the data. I'll bug him about how to fix it later today.

I think I still have the files, but I don't think I ever fixed the hole.

Though all I use it for now is to allow stupid people that have hosted forums at Stardust One access to it with a very big warning/usage agreement that will make them not want to tamper with it.

Xenon · #10 03-10-2003, 11:52 AM

Link: you should also say where to put this

you have to make sure, that phpinclude wouldn't be displayed, and also cannot be edited through urlmodifications also

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.08228 seconds Memory Usage 2,289KB Queries Executed 23 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (1)bbcode_code (1)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (1)pagenav_pagelink (10)post_thanks_box (10)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (10)post_thanks_postbit_info (9)postbit (10)postbit_onlinestatus (10)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!