PDA

View Full Version : Moderators Functions - vbAccessDenied


hambil
28 Mar 2006, 21:26
Keywords: admincp, access denied, forum access, access, user, admin, usergroup


This modification contains a MySQL injection vulnerability, and you are hereby advised to unintall this modification until such time that the author provides a fix.
-- vBorg Staff


Description:
A powerful tool for customizing the generic vBulletin access denied message.

Translations
German (http://www.vbhacks-germany.com/forum/showthread.php?t=3606) (Thanks to alluidh)

Features:

Fully Phrased.
Turn on or off in admin cp.
Created a custom message for any vBulletin generic access denied message.
Personalize messages with any user, forum or usergroup information.
Automatically send a PM to one or more users the first time a member receives a specific access denied message.
Personalize the PM with any user, forum or usergroup information.
Add an approval link to the automatic PM that will give the user a new primary or secondary usergroup of your choice when clicked.
Send a PM to everyone who received the original access request, and the requesting user, when they are approved.
Several layers of security.Use Case
On my board we only allow access to a few forums until a user has been approved by an admin. The sample screen shots show this process in action.

Install
Download the vbAccessDenied_1.0.zip file.
Unzip and upload the files in the upload directory to your forum root.
Import the product file in your admincp.
Create custom messages as desired.1.1 Changes
Supports bbcodes in messages (see updated screen shot).
Fixed sql bug that prevented many messages from showing properly.
Removed 255 character limit on messages.Upgrade from 1.0 to 1.1
You will need to reupload all files, and uninstall and reinstall the product to upgrade from 1.0 to 1.1. Please copy your messages to a text editor first if you want to save them.

hambil
28 Mar 2006, 22:18
First post reserved.

IrPr
28 Mar 2006, 22:22
YAY! what i was waiting for
First Click;) Thanks!

will test on my board

goblues
28 Mar 2006, 22:58
Will check out. Should prove to be a great addition!

IrPr
28 Mar 2006, 23:32
Works Fine for me! Thanks again
is it possible to report IP in private message? cause i'm using this mod for unregistered users!

hambil
28 Mar 2006, 23:45
Works Fine for me! Thanks again
is it possible to report IP in private message? cause i'm using this mod for unregistered users!
Sure. You can report any user field. For ip just use {user.ipaddress}

COBRAws
29 Mar 2006, 00:04
this is damn good!

Antivirus
29 Mar 2006, 01:30
This is a great idea, gonna try this... I was never happy with the generic denied message...

Also, pretty smart to put keywords for the hack in the top of the first post - nice!

hambil
29 Mar 2006, 02:27
Found a serious sql bug and fixed it. You should re-install. No need to uninstall or upload files - just download the product file again and re-import it.

projectego
29 Mar 2006, 06:49
This sounds interesting, I'll give it a try this evening. Already clicked install by the way. :)

Xplorer4x4
29 Mar 2006, 07:05
Well you can change the access denied message by editing a phrase, but this far surpases that option. This look to be a GREAt hack.

Thank you!

GamerzWorld
29 Mar 2006, 13:49
Cant seem to get it to work, where will the error message display?

hambil
29 Mar 2006, 14:49
Cant seem to get it to work, where will the error message display?
By just installing it won't do anything. You have to create custom messages.

The messages will then display when a user tries to do something they don't have access for, if you've created a message for that case. Otherwise they will get the default vBulletin message.

If you tell me what you are trying to do I might be able to help walk you through it. :)

GamerzWorld
29 Mar 2006, 15:39
By just installing it won't do anything. You have to create custom messages.

The messages will then display when a user tries to do something they don't have access for, if you've created a message for that case. Otherwise they will get the default vBulletin message.

If you tell me what you are trying to do I might be able to help walk you through it. :)

I have several clans on my site. I am trying to make it so that when someone tries to access a private clan forum they are applied for the usergroup of there clan needed for the access. Here is an example of the custom message I added yet it did not display..

Usergroup: Register users
Forum: Private Forum, Spiritual Connections USA
Script: * - Not sure if I should set to somethging?
Send PM : Yes
PM test: this is a test
Users: Merlin
Add a link to approve: Yes
Usergroup : SpiritualMember[USA]

Hope you get the idea :banana:

hambil
29 Mar 2006, 16:25
How is access to "Private Forum, Spiritual Connections USA" set? If they can view it, but not post or create threads, then they won't get the message until they try to create a thread or post.

bada_bing
29 Mar 2006, 16:33
Nice idea will reserve for future use

GamerzWorld
29 Mar 2006, 17:18
How is access to "Private Forum, Spiritual Connections USA" set? If they can view it, but not post or create threads, then they won't get the message until they try to create a thread or post.

Is there no way that when they enter they try to enter the forum it gives the message?

hambil
29 Mar 2006, 18:12
Is there no way that when they enter they try to enter the forum it gives the message?
I believe the problem is a vBulletin problem. If the forum is visible they can enter it. If it isn't visible they don't even see it. If you mark it as not visible and they try to access it via a bookmark or other url, they will get the message.

GamerzWorld
29 Mar 2006, 19:26
I believe the problem is a vBulletin problem. If the forum is visible they can enter it. If it isn't visible they don't even see it. If you mark it as not visible and they try to access it via a bookmark or other url, they will get the message.

Cant seem to get it to work >.< Doesnt seem to be added

p.s. is it possible to make users apply for a usergroup in the error rather than use this system

hambil
29 Mar 2006, 19:29
Cant seem to get it to work >.< Doesnt seem to be added
If you want to give me access I can take a look at your site and see what the problem is. Or you can give me some screen shots of usergroup/forum permissions, and your vbAccessDenied setup and I'll see if I can spot the problem.

hambil
29 Mar 2006, 19:47
Cant seem to get it to work >.< Doesnt seem to be added

p.s. is it possible to make users apply for a usergroup in the error rather than use this system
It should be. Just include your own bbcode link in the error. The easiest way is to find the button/link that does the work in vBulletin, and mimick the url it is using.

GamerzWorld
29 Mar 2006, 20:08
If you want to give me access I can take a look at your site and see what the problem is. Or you can give me some screen shots of usergroup/forum permissions, and your vbAccessDenied setup and I'll see if I can spot the problem.

WIll pm you my IM contacts and give you admin access on account registerd :banana:

hambil
29 Mar 2006, 20:27
Thanks to Gamerz I've realized that vbAccessDenied needs integration with vBulletin's group functions. I'll add this. I also plan on adding a new {matchlist} subsitution variable, that will list all users with matching ips to the one requesting access. Should be done by the weekend :)

pugmy
29 Mar 2006, 20:56
great idea. it seems very useful.

ive encountered an error after installing it and trying to login. any idea?

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'index(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near 'AND (script = 'index(*)' OR script = '*')' at line 4
Error Number : 1064

hambil
29 Mar 2006, 20:58
Well, you've got a blank forumid. What exactly are you doing when you get this message?

hambil
29 Mar 2006, 20:59
Anyway, it's a bug either way. I'll fix it and reupload in a bit.

pugmy
29 Mar 2006, 21:02
I was tying to access index.php for logging in. Then the sql error popped. After the installation, I haven't changed any setting for vbAccessDenied. I just installed it and tried to log in before configuring the hack.

hambil
29 Mar 2006, 21:06
Very odd. The hack is only called when the system is about to display an access denied message.

pugmy
29 Mar 2006, 21:12
Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.

alluidh
29 Mar 2006, 21:15
Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com?

hambil
29 Mar 2006, 21:17
Accessing index.php somehow checked your code. I got the error even after I deactivated the hack from "vbAccessDenied Settings" page. So i had to disable the product temporarily until I find a solution.
Okay, I made a change that should fix it - download the new zip and reinstall. Perhaps it will now uncover the real error :)

hambil
29 Mar 2006, 21:18
Hi Hambil
Is it OK to translate your powerful modification into german and gave the phrases to the members on vbhacks-germany.com? I'd be honored. Thank you :)

alluidh
29 Mar 2006, 21:19
I had to thank you

pugmy
29 Mar 2006, 21:20
i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.

hambil
29 Mar 2006, 21:21
i forgot to mention but unregistered users can't view my forum. perhaps thats the cause of it?

edit: oh awesome. ill try it right away.
Could be. Very interesting.

pugmy
29 Mar 2006, 21:31
This time, it properly inserted the forumid, but still ive got the sql error.

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid = 0
AND (script = 'index(*)' OR script = '*' OR script = 'index(*)';

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server
version for the right syntax to use near '' at line 4


hmm weird.

hambil
29 Mar 2006, 21:39
Hey! That's the sql bug I fixed in version 1.1. How did that creep back in? Dang - sorry folks. I've updated the zip again. Try now.

pugmy
29 Mar 2006, 21:41
the sql error disappeared when i created a vbaccessdenied page for unregistered users accessing index.php. however, this makes it unable for them to login in the first place.

edit. okidoki. thanks for the quick response.

pugmy
29 Mar 2006, 21:48
It seems it's working great now.
Thanks for the quick fix!

hambil
29 Mar 2006, 21:49
It seems it's working great now.
Thanks for the quick fix!
You're welcome. Now how about that install button... ;)

pugmy
29 Mar 2006, 21:58
installed :)

Tyegurl
30 Mar 2006, 05:16
okay so how do i choose more than one forum to deeny for one group?

hambil
30 Mar 2006, 05:43
okay so how do i choose more than one forum to deeny for one group?
You can duplicate the message, or use the * option for the forum - or set it up for a top level forum and it will also affect all the subforums because of how vBulletin works.

If people find they need a more powerful "multi-list box" kind of selection for forums and/or usergoups then I may consider adding that.

Tyegurl
30 Mar 2006, 05:48
okay so there's no way to just hold ctrl and click.....that would be nice....have a mass denial for certain forums....can you do that?

hambil
30 Mar 2006, 05:52
okay so there's no way to just hold ctrl and click.....that would be nice....have a mass denial for certain forums....can you do that?
Well, I'm not sure it's needed. Consider this: It only customizes the already existing "access denied" message. So - if you have 10 forums, and you have a usergroup that only has access to three of those forums, and you create a vbAccessDenied message with that usergroup name, and * for the forum, it will display whenever they try to access any of the seven forums they don't have access too.

vBulletin's usergroup, forum and promotion system is already very powerful - this hack builds on that, rather than replaces it.

Tyegurl
30 Mar 2006, 06:28
okay so i get it lol * goes in the forum....duh see i am a little thick....wasn't quite understanding....

so you can make one denial for a group for all the forums vb has denied them.

or a denial for a forum for all groups?

Tyegurl
30 Mar 2006, 06:34
well now i get a db error when i am unregisterd trying to access a page i shouldn't. i don't get a message about denial.

what have i done wrong?

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'arcade(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'arcade(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Thursday, March 30th 2006 @ 12:32:57 AM
Script : http://www.teamrespawn.com/vBulletin/arcade.php
Referrer : http://www.teamrespawn.com/vBulletin/forum.php

hambil
30 Mar 2006, 06:36
so you can make one denial for a group for all the forums vb has denied them.
Yup! :)

or a denial for a forum for all groups?
For all groups who vb has denied that forum, anyway.

Also, the messages are handled from specific to generic. So, if you have a group with a * for forum, and then you have the same group with a specific forum and a different message, they'll get the specific message for that forum, but the general one for all others.

The order is:
Specific message
General Usergroup Message
General Forum Message

hambil
30 Mar 2006, 06:37
well now i get a db error when i am unregisterd trying to access a page i shouldn't. i don't get a message about denial.

what have i done wrong?

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'arcade(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'arcade(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Thursday, March 30th 2006 @ 12:32:57 AM
Script : http://www.teamrespawn.com/vBulletin/arcade.php
Referrer : http://www.teamrespawn.com/vBulletin/forum.php
This should be fixed if you download the latest zip file.

Tyegurl
30 Mar 2006, 06:39
if its the one i downloaded tonight from the top of the page then yes.

nm i uploaded the wrong one dammit....i will fix thanks!

hambil
30 Mar 2006, 06:50
LOL - I do that all the time. It's hard to keep track sometimes :)

Tyegurl
30 Mar 2006, 06:51
one last thing.... how do i get it to automatically add the forum title and user's name? i am not too quick on this stuff

and yes with the correct version i got the message. sorry about that.

hambil
30 Mar 2006, 06:54
one last thing.... how do i get it to automatically add the forum title and user's name? i am not too quick on this stuff

and yes with the correct version i got the message. sorry about that.

One of the screen shots has some nice examples. Basically, any forum or user or usergroup data can be used. You put them in {} in the message.

Username would be {user.username}
and the forum would be {forum.title}

I'll put up a complete list of the standard vb ones tomorrow - but if you have installed hacks that add to the forum or user or usergroup table, you can also use those values too.

Delphiprogrammi
30 Mar 2006, 12:03
hi,

this doesn't work and throws an error every time you hit "messages" in the admincp navigation



Invalid SQL:

SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM vb3_accessdenied_message
LEFT JOIN vb3_usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN vb3_forum ON forum.forumid = accessdenied_message.forumid;

MySQL Error : Unknown table 'accessdenied_message'
Error Number : 1051
Date : Thursday, March 30th 2006 @ 07:00:54 AM
Script : http://*******/testvb/admincp/accessdenied.php?do=modify
Referrer : http://*******/testvb/admincp/index.php?do=nav
IP Address : ******
Username : ******
Classname : vb_database

hambil
30 Mar 2006, 12:07
hi,

this doesn't work and throws an error every time you hit "messages" in the admincp navigation
Unknown table means it didn't install properly for some reason. I have no idea why. What version is your MySQL?

Delphiprogrammi
30 Mar 2006, 12:12
Unknown table means it didn't install properly for some reason. I have no idea why. What version is your MySQL?

MySQL 4.1.14-standard

hambil
30 Mar 2006, 12:15
Can you remove the line $db->hide_errors() from the product xml and try importing it again? Tell me what, if any error you see?

Delphiprogrammi
30 Mar 2006, 12:24
Can you remove the line $db->hide_errors() from the product xml and try importing it again? Tell me what, if any error you see?

verry strange here is no error message ......


$msgs = $db->query_read("
SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM " . TABLE_PREFIX . "accessdenied_message
LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
");


that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing

hambil
30 Mar 2006, 12:28
verry strange here is no error message ......


$msgs = $db->query_read("
SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM " . TABLE_PREFIX . "accessdenied_message
LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
");

that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing
There is no field call accessdenied_message - it's the table name.

hambil
30 Mar 2006, 12:29
Ah...
I may see the problem - though why it hasn't caused anyone else trouble I don't know. Let me try a quick fix.

hambil
30 Mar 2006, 12:45
verry strange here is no error message ......


$msgs = $db->query_read("
SELECT accessdenied_message.*, usergroup.title AS usergroup, forum.title AS forum
FROM " . TABLE_PREFIX . "accessdenied_message
LEFT JOIN " . TABLE_PREFIX . "usergroup ON usergroup.usergroupid = accessdenied_message.usergroupid
LEFT JOIN " . TABLE_PREFIX . "forum ON forum.forumid = accessdenied_message.forumid
");

that is causing the error i have no field called "accessdenied_message" within the table vb3_accessdenied_message that field is for some reason missing
Okay, download the zip and try again.

Delphiprogrammi
30 Mar 2006, 13:24
Okay, download the zip and try again.

yeah working now thanks for fixing that do you mind telling me what the problem whas ?

GamerzWorld
30 Mar 2006, 13:55
Thanks to Gamerz I've realized that vbAccessDenied needs integration with vBulletin's group functions. I'll add this. I also plan on adding a new {matchlist} subsitution variable, that will list all users with matching ips to the one requesting access. Should be done by the weekend :)

Looking forward to this. My main concern was that I had no control over who could and who couldnt see the private forum, and therefore couldnt remove them. By intergrating the systems it

(a) Improved the current system massivley, as users are having problems finding where to apply
(b) Improves the use of your hack to automatically request

All it would need then is a link to registration as discussed :knockedout:

hambil
30 Mar 2006, 14:52
yeah working now thanks for fixing that do you mind telling me what the problem whas ?
The query was broken if you had a table prefix. You must have been the first to install it who has a table prefix :)

scottct1
06 Apr 2006, 17:36
Ok here is what I am trying to do.

I have a special forum on my site for supporters who donate.

At the moment if your not a donating member you can see the forum and if you click on the forum you are taken to it but are told that no posts have been made over the past 30 days.

What I would like it to do is when someone clicks on that forum they see a custom error message which asks them to consinder donating to get access to that forum.

Can that be done?

Thanks!

hambil
06 Apr 2006, 18:45
Well, you can only customize existing vbulletin access denied messages. The closest you can get is to make the forum so they can view it, but view nothing else (can't view thread contents or create new threads, etc.). Then use this tool to create a custom message for that forum and usergroup(s).

This to me actually seems like a better solution anyway, because the non-donating members are teased with the thread titles, and more encouraged to donate when they try to read and thread and get the message.

scottct1
06 Apr 2006, 19:03
Excellent, I think that will work. :D

Thank you!

scottct1
06 Apr 2006, 19:27
I would love to see this support formatted messages and possible vbcode.

I just typed up a nice message and its all squished together in one paragraph.

The origional looked like this...

You have tried to access the Private Supporting Members Pub and Grill Forum.

This is a special private forum made only available to those who financially support SatelliteGuys.US. (i.e. help us pay our bills)

Access to this special private forum can be yours for only $19.99 a year and besides giving you access to our very active Pub Member Forums you also get...

* Elimination of over 90% of the ads! (You will only see the top banner ad and the Gold Sponsors)
* A larger Private Message box, store 1000 Private Messages instead of only 25!
* The ability to store 300 pages (Using the SatelliteGuys Pager)instead of only 10!
* The ability to have your own ANIMATED Avatar!
* Ability for you to post FOR SALE items in our Classifieds Section!
* Access to our Private Back Room Forum - An optional forum where adults can hang out and discuss adult topics.
* A special icon next to your username in all your posts which tells everyone your a supporter!
* The good feeling that you help one of America's Most Popular Satellite sites stay online!

AND MORE!

And if you hurry now you will pay only $19.99 for a 1 years membership as the price will be going up to $24.95 on May 15th 2006!

To become a SatelliteGuys Supporter TODAY please visit http://www.satelliteguys.us/payments.php

If you pay by Credit Card you get all the benefits of your pub membership INSTANTLY!

Thank you for your support and for helping us keep the lights on!

However when it prints out it looks like this...

You have tried to access the Private Supporting Members Pub and Grill Forum. This is a special private forum made only available to those who financially support SatelliteGuys.US. (i.e. help us pay our bills) Access to this special private forum can be yours for only $19.99 a year and besides giving you access to our very active Pub Member Forums you also get... * Elimination of over 90% of the ads! (You will only see the top banner ad and the Gold Sponsors) * A larger Private Message box, store 1000 Private Messages instead of only 25! * The ability to store 300 pages (Using the SatelliteGuys Pager)instead of only 10! * The ability to have your own ANIMATED Avatar! * Ability for you to post FOR SALE items in our Classifieds Section! * Access to our Private Back Room Forum - An optional forum where adults can hang out and discuss adult topics. * A special icon next to your username in all your posts which tells everyone your a supporter! * The good feeling that you help one of America's Most Popular Satellite sites stay online! AND MORE! And if you hurry now you will pay only $19.99 for a 1 years membership as the price will be going up to $24.95 on May 15th 2006! To become a SatelliteGuys Supporter TODAY please visit http://www.satelliteguys.us/payments.php If you pay by Credit Card you get all the benefits of your pub membership INSTANTLY! Thank you for your support and for helping us keep the lights on!

Other then that working good!

Thanks!

hambil
06 Apr 2006, 19:30
It supports bbcode. See the attachment above: http://www.vbulletin.org/forum/attachment.php?attachmentid=44894&d=1143606717

I plan to use the WYSIWYG editor in the next version, but as you can see I've created a formated message. Can you give me some before and after screen shots?

hambil
06 Apr 2006, 19:34
Try creating the message using the WYSIWYG editor, when switching to the standard editor (button in the top right of the editor will do that). Then copy and pasting the message into vbAccessDenied. That should work.

This is why I will be directly supporting the WYSIWYG editor in the next version :)

scottct1
06 Apr 2006, 19:37
Here is what I am seeing...

The before is in the admin panel using the big editor.

The after is the message folks are actually seeing...

Thanks for your help!

scottct1
06 Apr 2006, 19:47
Try creating the message using the WYSIWYG editor, when switching to the standard editor (button in the top right of the editor will do that). Then copy and pasting the message into vbAccessDenied. That should work.

Tried that, no go, the BB Code displays correctly in the admin control panel (see picture 1)

However when the message is displayed to the user its all garbled up as seen in the second picture.

Thanks again!

scottct1
06 Apr 2006, 20:02
Ok I got it...

I had to use HTML instead of BBcodes and it all worked fine. The error messages now properly display. :)

Thanks again!

hambil
06 Apr 2006, 20:26
Ok I got it...

I had to use HTML instead of BBcodes and it all worked fine. The error messages now properly display. :)

Thanks again!
The bbcode parser somehow didn't make it into the product file. Ack! I've updated the product file, and doing an install with allow overwrite should enable bbcode with no harm done. Though you may need to change the html back to bbcode afterwards, I'm not sure.

Xplorer4x4
07 Apr 2006, 10:09
Database error in vBulletin 3.5.4:

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'private(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'private(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Friday, April 7th 2006 @ 10:05:28 AM
Script : http://www.domsforums.net/private.php
Referrer :
IP Address :
Username : Unregistered
Classname : vb_database
I got this trying to send a PM as a user waiting email conformation. It says unregistered but I was infact registered.

hambil
07 Apr 2006, 10:20
Database error in vBulletin 3.5.4:

Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid =
AND (script = 'private(*)' OR script = '*');

MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AND (script = 'private(*)' OR script = '*')' at line 4
Error Number : 1064
Date : Friday, April 7th 2006 @ 10:05:28 AM
Script : http://www.domsforums.net/private.php
Referrer :
IP Address :
Username : Unregistered
Classname : vb_database I got this trying to send a PM as a user waiting email conformation. It says unregistered but I was infact registered.
Make sure you'd downloaded and installed the lastest zip. This problem was fixed a while back.

hambil
10 Apr 2006, 00:49
I'm taking this off Beta. It hasn't had any complaints or bugs in a while ;)

computer1
18 Apr 2006, 18:10
I have install this nowe and markt the forum movies to the moderator group
but when I login to the forum whit normal user I can se and write to that section movies howe can I fix this??.

Can I use admin group I cant finde that groupe ???
here is the link to that section
http://forum.wrestlingsidan.se/showthread.php?p=644#post644

I dont nowe where is the wrong whit this

hambil
18 Apr 2006, 18:14
I have install this nowe and markt the forum movies to the moderator group
but when I login to the forum whit normal user I can se and write to that section movies
You mark it to the group you want to get the message. So, if you want normal users to get the message then deny them posting access to the forum (in forum settings) and then mark the access denied message as "movies" forum and "normal" usersgroup (whatever your normal usergroup and movies forum is called).

MissKalunji
11 May 2006, 22:18
is it possible to use that to block access to example download section? its not in a forum but its apart of vb?

hambil
11 May 2006, 22:22
is it possible to use that to block access to example download section? its not in a forum but its apart of vb?
You can't block anything with this. All it does is allow you to customize the generic vBulletin access denied message for things you can already block.

So, if downloads generate a generic access denied message (I'd have to check) then you can customize it.

MissKalunji
11 May 2006, 22:26
Nah it doesnt but thanks!

kurtbarker
11 May 2006, 22:36
hey mate, what an awesome addition...

looks very easy to use

can this be used to display error messages for php extensions. like the arcade [arcade.php], and other modifications, rather than just error messages for forum access?

EDIT: I just read the above message... Things like the arcade have a 'usergroup permission', but this displayed the "You do not have permission to view this page', can that be customised for the different modifications?

hambil
11 May 2006, 22:40
hey mate, what an awesome addition...

looks very easy to use

can this be used to display error messages for php extensions. like the arcade [arcade.php], and other modifications, rather than just error messages for forum access?
It can be used for anything that generates a generic access denied message - and that is much more than just forums access. Calendar access, member list, attachments, etc. etc.

It cannot be used for third party hacks, because it does not include them in the list of things that generate those messages. However, that is an interesting idea. I will look into that.

Edit:
BTW, You'll see that there is a pulldown for "Script & Action" for advance users only. It will give you an idea of all the things that generate the generic access denied message.

kurtbarker
11 May 2006, 22:50
sounds interesting

*will install after typing this message ;)

and if you could look into support for thrid party hacks, then "woohoo"

thanks

MissKalunji
11 May 2006, 23:34
same here gon try that as well

MissKalunji
11 May 2006, 23:41
Thats what i've been looking for for paid subscription but im looking for aswell the Link and Dwonload script

I dont want certain usergroup to even see the page

MissKalunji
11 May 2006, 23:45
actually its not working

hambil
11 May 2006, 23:46
actually its not working
What exactly are you trying to do?

MissKalunji
12 May 2006, 04:04
i wanna block access to the newbie aka Member in trainning to the Subscription

hambil
12 May 2006, 04:23
Well, if you don't want the forums to show at all you don't need this hack for that. However, if you want to have the forums visible, but give them a detailed access denied message when the new user tries to post this is the hack for you.

On my board all new members are restricted to a handful of forums. When they try to post in a forum they can see, but not post in, the access denied message is intercepted by this hack, and they are given the message I've attached a screen shot of.

A pm is then sent to all admins. When an admin clicks on the approve link in the pm another pm is sent to the user letting them know they are approved, and all the other admins are cc'd on it.

It works very well for us.

MissKalunji
13 May 2006, 00:05
Ok then thanks

MissKalunji
16 May 2006, 02:04
Im trying to uninstall and when an unregistered user tries to see an error page this comes up :


Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid = 0
AND (script = 'member(*)' OR script = '*');

MySQL Error : Table 'danceha_forums.accessdenied_message' doesn't exist
Error Number : 1146
Date : Monday, May 15th 2006 @ 10:00:21 PM
Script : http://profile.dancehallareaz.com/member.php?action=getinfo&u=3894
Referrer :
IP Address : 66.249.65.197
Username : Unregistered
Classname : vb_database

hambil
16 May 2006, 03:44
Im trying to uninstall and when an unregistered user tries to see an error page this comes up :


Invalid SQL:

SELECT * FROM accessdenied_message
WHERE usergroupid = 1
AND forumid = 0
AND (script = 'member(*)' OR script = '*');

MySQL Error : Table 'danceha_forums.accessdenied_message' doesn't exist
Error Number : 1146
Date : Monday, May 15th 2006 @ 10:00:21 PM
Script : http://profile.dancehallareaz.com/member.php?action=getinfo&u=3894
Referrer :
IP Address : 66.249.65.197
Username : Unregistered
Classname : vb_database
For some reason it didn't uninstall completely. It looks like a plug in is still active. Once you've used the uninstall in products, check for any plugins that are still there and delete them if necessary.

MissKalunji
16 May 2006, 04:01
No everything is uninstall

I checked and double check nothing

MissKalunji
16 May 2006, 04:02
When i disable is fine as soon as i uninstall error

hambil
16 May 2006, 05:09
The code in that error exists inside a plugin. How it could hang around after being uninstalled baffles me.

MissKalunji
16 May 2006, 05:11
humph fine. I'll get someone to fix it for me then
Thx

hambil
16 May 2006, 05:13
humph fine. I'll get someone to fix it for me then
Thx
I'm happy to take a look at it on your site. I just don't know how it is happening is all.

Stop
16 May 2006, 15:03
O God. I've been waiting for this powerful hack days and nights. Thanks in advanced.
Let me give it a try.

Stop
17 May 2006, 18:17
Sorry
I did every thing as you said but I still can't see where is it?
how can I get to the Acess Denied Messge Manger.
I didnt find it in vBulltion Options. ONLY vbAccessDenied Settings where you can turn it on or off.

hambil
17 May 2006, 18:21
Sorry
I did every thing as you said but I still can't see where is it?
how can I get to the Acess Denied Messge Manger.
I didnt find it in vBulltion Options. ONLY vbAccessDenied Settings where you can turn it on or off.
It should be a menu choice on the left menu in the admincp. If it's not there make sure you uploaded the xml file under includes/xml, and try re-importing with overwrite.

Stop
17 May 2006, 18:32
yah found it after the re-import.
Thanks a lot.

Stop
17 May 2006, 19:14
HI again. It works very fine now but there's just a little thing.
vBulletin Messege is not showing. Attachment better explains.
Any idea ?

hambil
17 May 2006, 19:22
The board doesn't show for access denied messages. This is true with or without my hack. It's working as it is designed. Can you give me an idea of what you would like it to do instead?

Stop
17 May 2006, 19:40
ammm,
can you add a phrase to be showed on the top-left-side to say what this message is, like , The English Club Message ?

edit:
forgot to comment on this,
The board doesn't show for access denied messages. This is true with or without my hack. It's working as it is designed.

I think it does if you mean this.

SaN-DeeP
17 May 2006, 19:40
thanks for release.

hambil
18 May 2006, 07:14
ammm,
can you add a phrase to be showed on the top-left-side to say what this message is, like , The English Club Message ?

The messages are fully bbcode and html enabled. In theory you can make them look anyway you want.


I think it does if you mean this.

I'm a little confused. I went to your site and it seemed to work as I expected, although the navbar was missing. Your site is heavily skinned, so it's hard for me to know exactly what is going on, and what you expect or want to see.

kurtbarker
20 May 2006, 04:15
It cannot be used for third party hacks, because it does not include them in the list of things that generate those messages. However, that is an interesting idea. I will look into that.

any word on this mate?

hambil
20 May 2006, 09:13
any word on this mate?
I will have a new release out this weekened :)

kurtbarker
22 May 2006, 07:28
i'll keep my eye out for it... thanks

Ambie
24 May 2006, 04:28
This is nice. :) Thank you! One problem though. When I get the pm, and go to click on the approve link, I am getting this message.

This action can only be done through a vbAccessDenied approval pm.

hambil
24 May 2006, 05:17
It's a security feature. There are two ways to get that message. 1) No pm was sent (or it didnt' get recorded in the database for some reason). 2) The person clicking the approve link is not one of the people the pm was sent too.

kafi
28 Aug 2006, 19:30
hambil thank you for this fantastic hack, I always had problems with generic alerts...

One suggestion though .-) I have pretty much sub-forums and would like to have inheriting message function (according to my testing id doesnt work). I mean that sub-forum will inherit the message from parent forum (if I tick it on) - the same way it inherit permissions...

Is this something possible/interesting for you to do? Please let me know, if not I will do this manually for all my forums (I have about 100 subforums - about third of them permissioned).

Installed - great hack .-)

hambil
28 Aug 2006, 20:49
hambil thank you for this fantastic hack, I always had problems with generic alerts...

One suggestion though .-) I have pretty much sub-forums and would like to have inheriting message function (according to my testing id doesnt work). I mean that sub-forum will inherit the message from parent forum (if I tick it on) - the same way it inherit permissions...

Is this something possible/interesting for you to do? Please let me know, if not I will do this manually for all my forums (I have about 100 subforums - about third of them permissioned).

Installed - great hack .-)
That's interesting. And I think it's probably pretty easily doable. I'll add it into the 3.6 update this week.

kafi
30 Aug 2006, 07:45
Great news hambil, you made me happy today :-)

I found that it might be even more handy to have inheritions if it come to use also your per-script function within settings.

kafi
30 Aug 2006, 10:54
humbil, if you want to add PM title to phrases it will be great: $pmdm->set('title', 'vbAccessDenied PM from ' . $vbulletin->userinfo['username']);
I have translated for myself in plugin.

kafi
30 Aug 2006, 11:18
hambil me again :-)

I am not sure that I understand the flow of the PM.

PM is sent automatically although I do not know wheter the user will want to join the usergroup or not and therefor I do not know wheter to approve him.

My model situation:
I have an article forum where shouldnt be posted any questions or so - just articles. I have set up alert-message saying that he has not right to post in article forum and asking him wheter he is serious about adding new article or not...
1. Lets say he is not and I am getting request PM from him to join automatically ( I do not know wheter he is serious or not) ...yes I can disable PM, but I like the automated PM-request and therefor I would add sort of confirmation of the request from the users side (either link in PM sended to user asking him wheter he is serious about adding new article and want to join author group, or maybe direct link in alert-message where he may apply to join author group).

hmm is it possible/interesting for you to do? I have disabled currently autoPM request for the time being.

hambil
31 Aug 2006, 00:04
Yeah, I'm not sure I fully understand. Making the pm title so it is configurable is no problem, and a good idea. The other part you talk about I'll need to understand better...

kafi
31 Aug 2006, 08:42
sorry sometimes I am lost in expressing things in englis :-)))

Current situation:
- if I want to automate process of approving user for usergroup I tick "Send PM" and this PM with "Approve" link is send whenever any user try to post in forum that he doesnt have a permission for it.
- this PM is sent on users behlaf [I find this part a problem, because I do not know wheter user who attempted to post in certain forum is really interested in posting in this certain forum (what mostly happen is that some newbies push "new thread" button wherever they happen to be)]

Desired situation:
- I suggest not to send PM on users behalf to admin but rather send automated PM to user asking him "Are you interested in posting in XY forum and become member of XY usergroup?" In this very same PM he will have a link like "I want to join" and once he click the link admin gets application PM with "Aprove" link.
----------------------------------------

Model situation:
I have a forum with articles/tutorials. Lot's of newbies are posting here because they happen to read tutorial and they start new thread with questions. Then I need to moderate this forum. I would rather use permission base system with your customized annoncement saying that "This forum is dedicated to tutorials. If you are interested in posting tutorials, PM was sent to you with application link to join our tutorial authors usergroup. If you are not interested in posting tutorial, please ignore PM and find appropriate forum to post your thread".
------------------

hope it is a bit better now ? ;-)

hambil
04 Sep 2006, 16:20
Yes. An interesting idea, and I think I can add that :)

parabat
01 Jan 2007, 18:12
Hambil

You porting this too 3.6.4??
Can I use this to only report those users that try accessing closed ares, without telling them the mods have been notified?

-Parabat

gunitman247
01 Jan 2007, 18:48
can this work custom profile fields?

hambil
13 Apr 2007, 00:42
This hack is no longer supported and will not be ported to 3.6 by me. It is open for anyone to take ownership of, as long as you have at least one released hack so it's clear you can code :) Just PM me.

EnIgMa1234
13 Apr 2007, 17:27
I have taken over this hack now. I will be working on a port for 3.6 soon

hambil
14 Apr 2007, 02:36
Once EnIgMa1234 has done a port and established his own mod thread, this thread will likely be deleted. It would be nice to keep the history, but it doesn't look like that is possible currently. Thanks EnIgMa, and best of luck :)