K4Z Systems, Lower Chatham St, Manchester, M1 5TF
K4Z Systems, Sydney Barnes Close, Rochdale, OL11 3DA
01706 653142 / 07912549920 / Contact Us

SQL Injection vBulletin in misc.php

Read full... / Comments (0) / Thursday, August 7th, 2008

Hacking vBulletin with an SQL Injection could not be more far from the truth with 3.5 series, its very stable and secure and always recommend clients to use it.

I was working on a forum for someone and I needed to work with misc.php

SQL Injection was staring at me. I got a friend to write a Perl Attacker for it. We tested in on OT, COSForums and LL.ORG. Here it is. I added some functions in the query to prevent vBulletin from kicking you out and MD5 Granny trying its best.. To prevent this from happening just make sure you have the latest patch released this week! OT lost 30,000 users!! (more…)

vBulletin Profile Re-Write with htaccess

Read full... / Comments (0) / Thursday, August 7th, 2008

What does it do?
It produces a short profile url like so: yourdomain.com/username

What was the point releasing this?
Someone emailed me about my existing modification vBulletin Members Page Subdomain Re-Write, and was complaining it does not work with 3.5.x series nor vBulletin 2.x or 3.x, I even found a modification simaler to this on vB.org so it inspired me to change it, I have added the new solution for offtopic, “nonetheless” the Members Page Subdomain Re-Write does a good job if this does not work..

Do you guarantee it will work on my server?
No.

Will you support this if I cannot get it to work for me?
Yes contact me, using this form

Will this work with usernames that have special characters or spaces in them?
I don’t know. I have only tested it on my test forum with a few usernames that don’t have special characters or spaces in them. If it works for you, please let others know.

How can I tell my members about the shorter profile url?
That is something you will need to figure out.
Or view my update post here to show it in their profiles: http://www.vbulletin.org/forum/showt…46#post1435246

If this does not work for me, can you suggest another one?
VBSeo
Zoints
Nuhit.com
vBulletin Radio

Insert the following code in your .htaccess file (Post comments for other tweaks and suggestions and alterations to save time for other people who surfed here):

RewriteEngine on
RewriteRule ^/?([a-zA-Z0-9]+)$ member.php?username=$1 [L]

vBulletin Members Page Subdomain Re-Write

Read full... / Comments (0) / Thursday, August 7th, 2008

I’ve created subdomains in the past with no problem, but for some reason this one is giving me trouble. So you want a members page re-write of htaccess, this was acheived for a client of mine over at offtopic.com, other than the “attractivenessuss” of Fazels desperation in his voice, I prompted him a freshbrooks invoice and sent him the solution..

Instead of using the subdomain
http://mars.offtopic.com
I want to instead use this address to call it:
http://members.offtopic.com/Fazel

Below is my .htaccess file:

You could also use the Apache ReWriteCond $1 for each members.php where the Userid is $1

This will allow subdomains and a re-write of the whole of your vBulletin, just place it in

root/vbulletin_root

And thats it, it will automatically redirect all member.php pages and also its best to place after any vBSEO hacks you already may have, the modification will need to be informed for members, so tell them about the changes!

Khaleel