Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 16 Feb 2005, 21:29
Akex Akex is offline
 
Join Date: Jul 2003
Real name: Alexis
To Improve our licence control system

Well, some noticed that a new discussion about our forum (not only) began just there : http://www.vbulletin.org/forum/showthread.php?t=76212

I won't discuss about author permission and so on, as it was already done many times before.

As we are not official, and I'm not complaining about that, we tried to find a way to make the difference between licenced members and users of pirated version. We are tired of that bunch of guys asking where they could download vb ...

The system is quite easy to use. When members try to download our french language version (which can also be downloaded on vbulletin.com), a error message ask them to go to a particular post on vbulletin.org (with the agreement of Xenon) and click on a link which is in a code area (only viewable by licence owners).

The link redirects them to a script on our forums which checks the HTTP_REFERER which must be the post url given above. If so, they can download the language file. The HTTP_REFERER prevents people having acces to our translation without going on vbulletin.org before. It's not 100% secure but I think it could be improved.

That's why I made this thread. To have your opinion about this system and have some ideas to improve it .

Thank you
__________________
www.vbulletin-fr.org administrator
Member of the french unofficial translators team of vB 3

Last edited by Akex : 16 Feb 2005 at 21:43.
Reply With Quote
  #2  
Old 16 Feb 2005, 22:07
noppid noppid is offline
 
Join Date: Mar 2003
What would be cool is a form we could put an email address in and let it check if it's connected to a valid license. If it is, we can email code to that email address only.
__________________
Add a photo gallery to your forum and get noticed by your members. Find out how at the vBulletin Computer Help Forum.
An informed rider makes their first destination the motorcycle forum at rider info.
Reply With Quote
  #3  
Old 16 Feb 2005, 22:09
Akex Akex is offline
 
Join Date: Jul 2003
Real name: Alexis
Impossible to do that as only Jelsoft can connect emails to licence owners.
__________________
www.vbulletin-fr.org administrator
Member of the french unofficial translators team of vB 3
Reply With Quote
  #4  
Old 17 Feb 2005, 00:00
Erwin's Avatar
Erwin Erwin is offline
 
Join Date: Jan 2002
Originally Posted by Akex
Impossible to do that as only Jelsoft can connect emails to licence owners.
Correct. They won't allow non-officially sites hosted on remote servers access to this database for many reasons, some of which would involve privacy and security.
Reply With Quote
  #5  
Old 17 Feb 2005, 00:30
Link14716's Avatar
Link14716 Link14716 is offline
 
Join Date: Jun 2002
Real name: Matthew Gordon
The license verification system I made for GeekyDesigns.com makes a randomly generated md5 hash (large array of many things, and many random things, then shuffled around and made into one big md5) that is added to the datastore and then auto-edits a post here containing the hash (though editing will probably have to be done manually now that vB checks referrers for $_POST stuff). Then, the user goes to a page, clicks a link to show the post with the hash, and has to enter it into a form. If it matches, they are added to a secondary group for licensed users.
__________________
Along with Zachery, I make releases as GeekyDesigns. Please do not PM or IM me for support.
Reply With Quote
  #6  
Old 17 Feb 2005, 00:56
cinq's Avatar
cinq cinq is offline
 
Join Date: Oct 2002
Originally Posted by Akex
That's why I made this thread. To have your opinion about this system and have some ideas to improve it .
I hope I didn't make a big fuss out of nothing by posting that thread

In any ways, my suggestion is, why not try to make vbulletin-fr an official site ?
Probably involves a lot more work though.
Reply With Quote
  #7  
Old 17 Feb 2005, 01:34
Dean C's Avatar
Dean C Dean C is offline
 
Join Date: Jan 2002
Real name: Dean Clatworthy
Originally Posted by Link14716
The license verification system I made for GeekyDesigns.com makes a randomly generated md5 hash (large array of many things, and many random things, then shuffled around and made into one big md5) that is added to the datastore and then auto-edits a post here containing the hash (though editing will probably have to be done manually now that vB checks referrers for $_POST stuff). Then, the user goes to a page, clicks a link to show the post with the hash, and has to enter it into a form. If it matches, they are added to a secondary group for licensed users.
And what happens when a users license expires or is revoked? Your system unfortunately doesn't encompass this as fa as I can understand from what you said
__________________
Dean Clatworthy - Web Developer/Designer
Reply With Quote
  #8  
Old 17 Feb 2005, 05:55
Akex Akex is offline
 
Join Date: Jul 2003
Real name: Alexis
Originally Posted by Dean C
And what happens when a users license expires or is revoked? Your system unfortunately doesn't encompass this as fa as I can understand from what you said
Well, it's the same for Brian with vBadvanced and us with our system.*

I would prefer something like Link14716 system, but as he said, we can't make POST request from outside (better for security). However, it's (LINK, Brian and our ... systems) better than nothing and our policies can differ from Jelsoft ones as it concerns stuff on our forums.

Why not making a form on vBulletin.com which could say if an email address corresponds to a valid licence owner.
Another suggestion. Why don't allow POST requests from some sites (.i.e LINk one and vbulletin-fr for example), which could allow us to edit our post (only one post) automatically thanks to cronjobs ? It should be safer than HTTP_REFERER I think. It's just a suggestion and I understand it could be difficult or dangerous to do so.
__________________
www.vbulletin-fr.org administrator
Member of the french unofficial translators team of vB 3
Reply With Quote
  #9  
Old 17 Feb 2005, 06:32
Revan's Avatar
Revan Revan is offline
 
Join Date: Jan 2004
Real name: Fillip
Originally Posted by Dean C
And what happens when a users license expires or is revoked? Your system unfortunately doesn't encompass this as fa as I can understand from what you said
When I joined GeekyDesigns forum and went through the validation system, it said that I would be moved out of this usergroup after a set period of time, at which I would have to reenter the hash to once again prove my licence status.
__________________
* You may translate any of my posted tutorials/Phrase XML files and release them to any site.
* You may not release full copies of any modification (incl. Product XML files) to any site.
* You must always link back to the thread on vBulletin.org.

I'm not available for support, (major) custom changes to any of my modifications or (major) custom jobs at this point in time, due to college.
Reply With Quote
  #10  
Old 17 Feb 2005, 22:46
Erwin's Avatar
Erwin Erwin is offline
 
Join Date: Jan 2002
Originally Posted by Akex
Well, it's the same for Brian with vBadvanced and us with our system.*

I would prefer something like Link14716 system, but as he said, we can't make POST request from outside (better for security). However, it's (LINK, Brian and our ... systems) better than nothing and our policies can differ from Jelsoft ones as it concerns stuff on our forums.

Why not making a form on vBulletin.com which could say if an email address corresponds to a valid licence owner.
Another suggestion. Why don't allow POST requests from some sites (.i.e LINk one and vbulletin-fr for example), which could allow us to edit our post (only one post) automatically thanks to cronjobs ? It should be safer than HTTP_REFERER I think. It's just a suggestion and I understand it could be difficult or dangerous to do so.
You need to address Jelsoft directly regarding these suggestions.
Reply With Quote
  #11  
Old 17 Feb 2005, 22:58
Akex Akex is offline
 
Join Date: Jul 2003
Real name: Alexis
You right, sorry. Sometimes I forget the forum url where I post ^^
__________________
www.vbulletin-fr.org administrator
Member of the french unofficial translators team of vB 3
Reply With Quote
  #12  
Old 18 Feb 2005, 15:13
PitchouneN64ngc's Avatar
PitchouneN64ngc PitchouneN64ngc is offline
 
Join Date: Aug 2002
Real name: Yves
Originally Posted by Akex
As we are not official, and I'm not complaining about that, we tried to find a way to make the difference between licenced members and users of pirated version. We are tired of that bunch of guys asking where they could download vb ...
We can provide some example of this :

http://forum.vbulletin-fr.org/showpo...09&postcount=2
http://forum.vbulletin-fr.org/showpo...93&postcount=6
http://forum.vbulletin-fr.org/showpo...72&postcount=5
http://forum.vbulletin-fr.org/showpo...11&postcount=2
__________________
Administrator of http://forum.vbulletin-fr.org/

vBulletin QA Engineer / Lead Project Tools Developer
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
Forum Jump


New To Site? Need Help?

All times are GMT. The time now is 10:59.

Layout Options | Width: Wide Color: