Go Back   vb.org Archive > Community Discussions > Modification Requests/Questions (Unpaid)
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools Display Modes
  #1  
Old 03-04-2004, 09:17 AM
Areku Areku is offline
 
Join Date: Feb 2002
Posts: 540
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default Removal of VB version everywhere public pleasE!

Since I'm the only administrator of my vbulletin site... why do I need to know the current vb version I own PUBLICLY? It's ok to have it on the admin panel, but... since YOU post the leaks, bugs and exploits VB has (allowing bad guys to hack an outdated vb), what's the meaning of posting the VB version currently running on the footer and MYSQL errors?

This gives hackers advantadge knowing which version do you run and which leaks does it have... and I can't see any reason on why vb version should be public at all... nor even a marketing usage.

Sometimes it's hard to keep a vb updated, so...

how can I remove the VB version from all the footers and MYSQL error reports? on either vb2.x and vb3.x series please!

Thanks!
Reply With Quote
  #2  
Old 03-04-2004, 09:50 AM
Boofo's Avatar
Boofo Boofo is offline
 
Join Date: Mar 2002
Location: Des Moines, IA (USA)
Posts: 15,776
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

You can take the version out if you leave the Jelsoft and vBulletin copyright notice there.
Reply With Quote
  #3  
Old 03-04-2004, 09:50 AM
Andreas's Avatar
Andreas Andreas is offline
 
Join Date: Jan 2004
Location: Germany
Posts: 6,863
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

It's good for everybody to know about bugs & security leaks.
Security by obscurity never did, does not and will never work!

It's also possible to find out which version of Apache you are running (which might be a biger target for attackers), so why bother for vB version?
Reply With Quote
  #4  
Old 03-04-2004, 02:14 PM
Areku Areku is offline
 
Join Date: Feb 2002
Posts: 540
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

So... let's asume I have VB v2.x installed and I have no time to upgrade.

A critical security leak is posted and every1 is urged to upgrqade. I have no time to upgrade but ANYONE (not only a hacker) can use the exploit to mess my VBulletin in 5 seconds...

Repeat: WHY do my audience need to know which VB version I run? They don't need that information AT ALL, they won't develop anything for me on my VB forums... so WHY?

And on a secured system, there are ways to hide Apache version for example... at least mine is hidden.
Reply With Quote
  #5  
Old 03-04-2004, 02:32 PM
filburt1 filburt1 is offline
 
Join Date: Feb 2002
Location: Maryland, US
Posts: 6,144
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Areku
So... let's asume I have VB v2.x installed and I have no time to upgrade.

A critical security leak is posted and every1 is urged to upgrqade. I have no time to upgrade but ANYONE (not only a hacker) can use the exploit to mess my VBulletin in 5 seconds...

Repeat: WHY do my audience need to know which VB version I run? They don't need that information AT ALL, they won't develop anything for me on my VB forums... so WHY?

And on a secured system, there are ways to hide Apache version for example... at least mine is hidden.
You can edit the version number within the setting table to something useless like 4.0.0. This will confuse the new version notification system in the admin CP, however.

I know where you're coming from; I removed the vB version number on my site from all publicly visible templates because there is no need for anybody to know it.
Reply With Quote
  #6  
Old 03-05-2004, 10:23 AM
Areku Areku is offline
 
Join Date: Feb 2002
Posts: 540
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Cool, at least I'm not alone

Thanks!
Reply With Quote
  #7  
Old 02-22-2006, 07:12 AM
Areku Areku is offline
 
Join Date: Feb 2002
Posts: 540
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I haven't yet found where to remove the vERSION NUMBER of the ADMIN PANEL LOGIN SCREEN.

Ive rereviewed all phrases and index.php, global.php and functions.php and yet no luck!

WHERE/HOW CAN I REMOVE THE VERSION NUMBER OF MY VB 3.x.x.y.y.z.z installation that appears when typing the Admin panel URL!?!?!?

Thanks!
Reply With Quote
  #8  
Old 02-22-2006, 11:09 AM
MRGTB MRGTB is offline
 
Join Date: Dec 2004
Posts: 548
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I think its a fase isn't it that you have to edit the bit of code out in the phase that displays the version number, not sure but I think you can do that to remove it from the footer
Reply With Quote
  #9  
Old 02-22-2006, 11:19 AM
Areku Areku is offline
 
Join Date: Feb 2002
Posts: 540
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Gary Bolton
I think its a fase isn't it that you have to edit the bit of code out in the phase that displays the version number, not sure but I think you can do that to remove it from the footer
U mean phrase? I checked all containing vbulletin but couldnt find the one using version number being displayed on the admin cp...
Reply With Quote
  #10  
Old 02-22-2006, 11:40 AM
MRGTB MRGTB is offline
 
Join Date: Dec 2004
Posts: 548
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Search for this phase name:

powered_by_vbulletin

and I think is you remove the "{1}" that will remove the version number from the footer
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 05:03 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04471 seconds
  • Memory Usage 2,251KB
  • Queries Executed 11 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (1)ad_showthread_firstpost
  • (1)ad_showthread_firstpost_sig
  • (1)ad_showthread_firstpost_start
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)navbar
  • (3)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (1)pagenav_pagelink
  • (10)post_thanks_box
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (10)post_thanks_postbit_info
  • (10)postbit
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete