Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
vBPlaza / vBux 1.6.0 (with security fixes) Details »
vBPlaza / vBux 1.6.0 (with security fixes)
Mod Version: 1.6.0, by eXtremeTim (Member) eXtremeTim is offline
Developer Last Online: Feb 2008 I like it Show Printable Version Email this Page

This thread is in the Modification Graveyard.
vB Version: 3.6.5 Rating: (3 votes - 5.00 average) Installs: 13
Released: 04 May 2007 Last Update: 04 May 2007 Downloads: 68
Not Supported DB Changes Uses Plugins Template Edits Additional Files  

Edit: The staff who examined this has found that not all exploits detailed to the original author have been fixed in this version, plus permission was not obtained from the original author for this release, so therefore we have no alternative but to remove it again.


vbBux / vbPlaza v1.6.0 originally by CMX updated by eXtremeTim

v1.5.7 AND HIGHER are now compatible with vBulletin v3.5.x and v3.6.x

Welcome to the largest points/store system for vBulletin! READ THE ENTIRE POST AGAIN AS THERE HAVE BEEN CHANGES SINCE THE CONVERSION TO vbBux / vbPlaza!!

Credits: MrZeropage for ibProArcade Support, John for v3 Arcade Support, Caimakale for various additions including ribbons and his other addons for vbPlaza, defi for the addon for Paypal Subscriptions.

Now with 135 Options for purchasing at your forums and this is still rising folks!

NOTE: As of this version, there is a Template Patcher helper inside the Admin CP. Admin CP -> vbPlaza Maintenance -> Auto Patch Templates, when you run this the first time, it will just list the changes that it has found/not found. If you press Attempt Auto Patches, it will modify the template changes it has found only. It will also modify all styles for your forums. I have tested this on all 3 of my licensed vBulletin production websites and the patches all worked great.

UPDATED MUST READ NOTES:
1) RE-READ THE UPGRADING OR NEW INSTALLATION INSTRUCTIONS AS THEY HAVE CHANGED FROM THE PREVIOUS VERSIONS!!
2) IF UPGRADING FROM A PREVIOUS VERSION OF eBux / eStore. YOU MUST INSTALL THIS ONE FIRST TO SAVE YOUR SETTINGS. (BUT YOU WOULD KNOW THIS IF YOU READ THE UPGRADING INSTRUCTIONS!! DONT SAY I DIDNT WARN YOU!!)


Features List:
This section has been moved due to its length. Look in the file included insize the zip named features.txt.

Release Notes:
This section will only show the most recent changes. For the rest of the changes, look in the file included inside the zip named changes.txt.

NOTE: If you want ibProArcade, v3 Arcade or vBookie integration now, you'll have to install the appropriate Addon included in the download. The reason for these parts being packaged as Addons, is to make the install a little smaller for users who do not have an Arcade, and because both Arcades cant be installed simultaneously as well. So it saves space only installing the one that you currently have.

v1.5.8 Updates:
1) Bugfix: Quick editing a post with BB Codes, modified the post directly instead of modifying a copy.
2) Bugfix: Some phrases fixed.
3) Bugfix: TABLEPREFIX bug has been fixed.
4) Bugfix: Addon Product XML sheets do not have executionorder in them anymore for vB 3.5 compatibility.

Database Backups Recommended!
Although I have upgraded 3 forums with this script already, it IS recommended that you backup your database before installing this product!!

Upgrading Instructions:
NOTE: THESE INSTRUCTIONS ARE FOR UPGRADING IF YOU HAD A PREVIOUS VERSION OF eBux / eStore INSTALLED!!
1) DO NOT UNINSTALL eBux / eStore (UNLESS YOU WANT TO LOSE ANY AND ALL SETTINGS.)
2) Reupload all of the files in the upload folder to your forum's root folder. Make sure that all files are being overwritten. Do not move on to the next step until all files are transferred successfully!
NOTE: It could take a long time to install if you have a lot of registered users, be PATIENT! It should display the messages as it goes along to let you know that it IS working.
3) After finished with step 2!! Reimport the product-vbbuxplaza.xml file via Admin CP -> Plugin System -> Manage Products -> Add/Import Product. Make sure that Allow Overwrite is set to YES.
4) Refresh the Admin CP and you will see all of the vbBux / vbPlaza Admin CP features at the top.
5) UNINSTALL THE OLD eBux / eStore NOW!! Go to Admin CP -> Plugin System -> Manage Products -> eBux / eStore -> Uninstall.
6) You can delete all files/folders that have the word estore or elottery in them from the FTP as well.
7) You will need to redo the template edits listed below as almost all of them have changed since the previous eBux / eStore.

If upgrading from a previous version of vbBux / vbPlaza follow these instructions:
1) Reupload all of the files in the upload folder to your forum's root folder. Make sure that all files are being overwritten. Do not move on to the next step until all files are transferred successfully!
2) After finished with step 2!! Reimport the product-vbbuxplaza.xml file via Admin CP -> Manage Products -> Add/Import Product. Make sure that Allow Overwrite is set to YES.
3) Refresh the Admin CP and get to checking your settings!
NOTE: You will be happy know that NO templates have been updated from v1.5.0 to v1.5.2!

New Installation Instructions:
1) Upload all of the files/folders in the UPLOAD folder to your forum's root folder.
2) Import the product-vbbuxplaza.xml via Admin CP -> Manage Products -> Add/Import Product.
NOTE: It could take a long time to install if you have a lot of registered users, be PATIENT! It should display the messages as it goes along to let you know that it IS working.
3) Refresh the Admin CP and start setting up your settings!
4) You will need to do all of the template edits listed below as well.

Template Edits:
A) Inside templates 'postbit' AND 'postbit_legacy':

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Next Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Then Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Then Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Add Below:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

B) Inside template 'navbar':

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Add Below:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Then Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Add Above:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

C) Inside template 'MEMBERINFO':

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Next Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Then Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Add Above:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

D) Inside template 'forumrules':

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Add Below:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

E): Inside template 'USERCP_SHELL':

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Add Above:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

F): Inside template 'threadbit':

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

vBulletin 3.5.x Only Edit:

Next Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

vBulletin 3.6.x Only Edit:

Next Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Find:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

Replace With:
Code:
Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

If you find any security issues please report them to me via pm so I can fix them asap. I have spent quite a bit of time reading through the code lately fixing any that I could find in the action modules.

I will be supporting this over at my site as well as here and for now I will continue to update it and improve on it.

CMX if you do show up please contact me so we can work out arrangements and possible see about joining teams to continue the development on vbplaza / vbux.

I am not perfect so please if I missed any security exploits that I overlooked in the reading of this mass amt of code please report them via pm and not via the thread.

Download Now

Only licensed members can download files, Click Here for more information.

Show Your Support

  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Comments
  #2  
Old 04 May 2007, 11:11
bold bold is offline
 
Join Date: Oct 2004
Hooray!

Last edited by bold; 04 May 2007 at 11:18.
Reply With Quote
  #3  
Old 04 May 2007, 11:15
eXtremeTim eXtremeTim is offline
 
Join Date: Jun 2002
Real name: Tim Yarbrough
Reserved


Report any bugs you find with the system so that i can finish fixing 3.6.5 compatibility issues.

Special characters are broken for now till I have time to fix the security exploits in a manor to not break them.

Last edited by eXtremeTim; 04 May 2007 at 11:18.
Reply With Quote
  #4  
Old 04 May 2007, 11:18
TTG's Avatar
TTG TTG is offline
 
Join Date: May 2004
Wow .. 1st install
Well done Tim .. great achievement if it now works as originally designed.
Reply With Quote
  #5  
Old 04 May 2007, 11:29
eXtremeTim eXtremeTim is offline
 
Join Date: Jun 2002
Real name: Tim Yarbrough
I just want to state for the record that I will be maintaining this hack since the original author is nowhere to be found and unreachable.
Reply With Quote
  #6  
Old 04 May 2007, 11:39
Yours Truly's Avatar
Yours Truly Yours Truly is offline
 
Join Date: Feb 2007
Real name: Dan Gamble
Wow you will be L O V E D lol
Reply With Quote
  #7  
Old 04 May 2007, 11:40
ngocha85's Avatar
ngocha85 ngocha85 is offline
 
Join Date: Jan 2006
With 1.5.8, do you want to fix Security Hole?+
OK. This is everything you need to do:

Go to your vbplaza folder, find occurrences of the following:
includes/function_vbplaza.php
Just changes the the php function with vb's own cleaning class.
includes/function_vbplaza.php(line 152)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

go to
vbplaza/action.admindonate.php (line 133)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

goto
vbplaza/action.changeotherusertitle.php (line 136)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

goto
vbplaza/action.changeusertitle.php (line 87)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

goto
vbplaza/action.donate.php (line 164)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

goto
vbplaza/action.gift.php (line 209)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

goto
vbplaza/action.ribbons.php (line 218)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

make that

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

That's all!
__________________
updatesofts.com (Admin)
hotgame.vn (Admin)

Reply With Quote
  #8  
Old 04 May 2007, 11:56
Hornstar's Avatar
Hornstar Hornstar is offline
 
Join Date: Jun 2005
Real name: Matt
hey awesome work, been waiting for ages for this. its great to see it is supported! Thanks.
Reply With Quote
  #9  
Old 04 May 2007, 12:01
eXtremeTim eXtremeTim is offline
 
Join Date: Jun 2002
Real name: Tim Yarbrough
i will be releasing an update shortly
Reply With Quote
  #10  
Old 04 May 2007, 12:11
Yours Truly's Avatar
Yours Truly Yours Truly is offline
 
Join Date: Feb 2007
Real name: Dan Gamble
Do you have much planned as in new features or will you just be maintaining this?
Reply With Quote
  #11  
Old 04 May 2007, 12:17
eXtremeTim eXtremeTim is offline
 
Join Date: Jun 2002
Real name: Tim Yarbrough
I will be adding new stuff in as I get the ideas together for them.

So yes for now I will take over this modification and keep it updated and fix bugs ect.


1.6.0 repacked released this fixed a few remaining security holes.
Reply With Quote
  #12  
Old 04 May 2007, 12:18
Yours Truly's Avatar
Yours Truly Yours Truly is offline
 
Join Date: Feb 2007
Real name: Dan Gamble
Like i said you will be loved
Reply With Quote
  #13  
Old 04 May 2007, 12:29
Zowners Zowners is offline
 
Join Date: Dec 2005
Awesome

I will install asap
Reply With Quote
  #14  
Old 04 May 2007, 12:55
ngocha85's Avatar
ngocha85 ngocha85 is offline
 
Join Date: Jan 2006
@eXtremeTim: Thanks you!:d
__________________
updatesofts.com (Admin)
hotgame.vn (Admin)

Reply With Quote
  #15  
Old 04 May 2007, 13:00
eXtremeTim eXtremeTim is offline
 
Join Date: Jun 2002
Real name: Tim Yarbrough
Your welcome.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 02:51.

Layout Options | Width: Wide Color: