[Release] User Management Plugin (Page 1 of 3)

Connorhd · 2005-01-19 20:24

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Topic: [Release] User Management Plugin

First of all i fully recommend you make a backup before using this plugin as although I have tested it there could either be problems or you could accidentally delete many of your users.

This mod provides two additional user management functions, user pruning which involves deleting users over a certain number of days old and with less than a number of posts. It also allows you to create users which is useful if you have cloed your forum from new registrations but wish to create users.

If you have any problems, comments, suggestions please tell me

Download - updated

FluxBB.
Connorhd.co.uk.

Rickard · 2005-01-19 20:49

Rickard
PunBB Developer
Offline

From: 127.0.0.1
Registered: 2001-11-02
Posts: 9,167

Re: [Release] User Management Plugin

Great stuff. Another thing I can remove from the todo list

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Nibbler(cpg) · 2005-01-19 21:15

Nibbler(cpg)
Member
Offline

From: UK
Registered: 2004-07-24
Posts: 97

Re: [Release] User Management Plugin

You mean accounts that are over a certain number of days old, not users I suppose

Connorhd · 2005-01-19 21:25

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

lol yeh

FluxBB.
Connorhd.co.uk.

Katsumi_ · 2005-01-19 22:49

Katsumi_
Member
Offline

From: France
Registered: 2005-01-17
Posts: 33

Re: [Release] User Management Plugin

thanks a lot, it is installed

Smartys · 2005-01-19 23:29

Smartys
Former PunBB Developer
Offline

Registered: 2004-04-30
Posts: 7,844

Re: [Release] User Management Plugin

There's an SQL injection possible:

PunBB reported: Unable to delete users 

Database reported: Unknown column 'a' in 'where clause' (Errno: 1054) 

Failed query: DELETE FROM forum_users WHERE (num_posts < a) AND (registered < 1106177066) AND (id > 2) AND (group_id > 3)

Oh, and IMO this should be an admin only thing, especially since deletion of users is typically left to admins (setting a minimum of 0 days and a max of 999999 posts with the delete admins/mods set to yes would also really screw your forum, especially since mods shouldn't be able to delete admins)

Otherwise, I really like it

Widell · 2005-01-20 10:34

Widell
Member
Offline

Registered: 2005-01-12
Posts: 76

Re: [Release] User Management Plugin

thanks a lot! great plugin

Connorhd · 2005-01-20 16:46

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

Smartys wrote:

There's an SQL injection possible

i don't think its possible to cause a problem with this but i'll add intval() to be sure

Smartys wrote:

this should be an admin only thing

yeh probably i'll change that too

FluxBB.
Connorhd.co.uk.

cows · 2005-01-20 22:10

cows
Senior Member
Offline

Registered: 2004-12-30
Posts: 203

Re: [Release] User Management Plugin

so not to be dumb well i am anways i put this in the plugins folder. Then upload it then after that it works or how does this work?

Connorhd · 2005-01-20 22:20

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

yeh you just upload the file into the plugins folder and its added to the bottom of the admin menu

FluxBB.
Connorhd.co.uk.

cows · 2005-01-20 22:42

cows
Senior Member
Offline

Registered: 2004-12-30
Posts: 203

Re: [Release] User Management Plugin

wow thats supper simple lol.

Smartys · 2005-01-20 23:31

Smartys
Former PunBB Developer
Offline

Registered: 2004-04-30
Posts: 7,844

Re: [Release] User Management Plugin

Mmm, came up with another suggestion: get rid of unverified users

Connorhd · 2005-01-21 07:46

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

yeh good idea, i'll look at it some time, i'm a bit busy atm i have the database plugin, a tpl editor plugin for mypunbb, and a chat mod to make, so i might just leave this for a bit see if anything else comes up so i can get it all done at once

FluxBB.
Connorhd.co.uk.

Dantes · 2005-01-25 20:52

Dantes
Member
Offline

From: Irkutsk
Registered: 2005-01-24
Posts: 33

Re: [Release] User Management Plugin

And why plug-ins can be caused directly?
Disclosing of installation patch
http://your_name.ru/forums/plugins/AP_U … gement.php
It should seems to us any plug-in to begin

define('PUN_ROOT', '../');
require PUN_ROOT.'include/common.php';
require PUN_ROOT.'include/common_admin.php';

if ($pun_user['g_id'] > PUN_MOD)
{
Header("Location: ../index.php");
}

PHP - It is our life ...

Connorhd · 2005-01-25 22:29

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

you don't access them directly you access them via the admin menu

FluxBB.
Connorhd.co.uk.

Rickard · 2005-01-25 22:49

Rickard
PunBB Developer
Offline

From: 127.0.0.1
Registered: 2001-11-02
Posts: 9,167

Re: [Release] User Management Plugin

Dantes: Because there's a lot of things we don't want to have to do in the plugin code. That's why we use admin_loader.php.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Dantes · 2005-01-26 16:07

Dantes
Member
Offline

From: Irkutsk
Registered: 2005-01-24
Posts: 33

Re: [Release] User Management Plugin

îê I shall think as to deceive it

PHP - It is our life ...

Connorhd · 2005-01-26 16:18

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

huh? editing plugins to be accessed directly would lead to security issues

FluxBB.
Connorhd.co.uk.

Dantes · 2005-01-26 16:27

Dantes
Member
Offline

From: Irkutsk
Registered: 2005-01-24
Posts: 33

Re: [Release] User Management Plugin

I just also am disturbed with protection
DISCLOSING of a way on my server very dangerously !!!

PHP - It is our life ...

Dantes · 2005-01-26 16:30

Dantes
Member
Offline

From: Irkutsk
Registered: 2005-01-24
Posts: 33

Re: [Release] User Management Plugin

We want as to put the filter on SQL injection ...

PHP - It is our life ...

Connorhd · 2005-01-26 16:31

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

huh? if you use the plugin properly it shouldn't be a problem

FluxBB.
Connorhd.co.uk.

Smartys · 2005-01-26 18:10

Smartys
Former PunBB Developer
Offline

Registered: 2004-04-30
Posts: 7,844

Re: [Release] User Management Plugin

Well, if the server has REGISTER_GLOBALS on, you can set db_type: dunno if that can be abused for anything

Rickard · 2005-01-26 18:18

Rickard
PunBB Developer
Offline

From: 127.0.0.1
Registered: 2001-11-02
Posts: 9,167

Re: [Release] User Management Plugin

Dantes is right. Adding

// Make sure no one attempts to run this script "directly"
if (!defined('PUN'))
    exit;

to the top of the plugin script should solve the problem.

"Programming is like sex: one mistake and you have to support it for the rest of your life."

Connorhd · 2005-02-06 12:48

Connorhd
Former PunBB Developer
Offline

From: Leeds, UK
Registered: 2004-06-13
Posts: 4,195

Re: [Release] User Management Plugin

Smartys wrote:

Mmm, came up with another suggestion: get rid of unverified users

i was just thinking about this now, it will prune unverified users since they have 0 posts

FluxBB.
Connorhd.co.uk.

Smartys · 2005-02-06 12:50

Smartys
Former PunBB Developer
Offline

Registered: 2004-04-30
Posts: 7,844

Re: [Release] User Management Plugin

Well, there's a difference between unverified users and verified with 0 posts. Some forums require registration to view the forum: and some people never post, just read.

[Release] User Management Plugin (Page 1 of 3)

Posts: 1 to 25 of 72

1 Topic by Connorhd 2005-01-19 20:24 (edited by Connorhd 2005-01-20 16:49)

Topic: [Release] User Management Plugin

2 Reply by Rickard 2005-01-19 20:49

Re: [Release] User Management Plugin

3 Reply by Nibbler(cpg) 2005-01-19 21:15

Re: [Release] User Management Plugin

4 Reply by Connorhd 2005-01-19 21:25

Re: [Release] User Management Plugin

5 Reply by Katsumi_ 2005-01-19 22:49

Re: [Release] User Management Plugin

6 Reply by Smartys 2005-01-19 23:29 (edited by Smartys 2005-01-19 23:37)

Re: [Release] User Management Plugin

7 Reply by Widell 2005-01-20 10:34

Re: [Release] User Management Plugin

8 Reply by Connorhd 2005-01-20 16:46

Re: [Release] User Management Plugin

9 Reply by cows 2005-01-20 22:10

Re: [Release] User Management Plugin

10 Reply by Connorhd 2005-01-20 22:20

Re: [Release] User Management Plugin

11 Reply by cows 2005-01-20 22:42

Re: [Release] User Management Plugin

12 Reply by Smartys 2005-01-20 23:31

Re: [Release] User Management Plugin

13 Reply by Connorhd 2005-01-21 07:46

Re: [Release] User Management Plugin

14 Reply by Dantes 2005-01-25 20:52

Re: [Release] User Management Plugin

15 Reply by Connorhd 2005-01-25 22:29

Re: [Release] User Management Plugin

16 Reply by Rickard 2005-01-25 22:49

Re: [Release] User Management Plugin

17 Reply by Dantes 2005-01-26 16:07

Re: [Release] User Management Plugin

18 Reply by Connorhd 2005-01-26 16:18

Re: [Release] User Management Plugin

19 Reply by Dantes 2005-01-26 16:27

Re: [Release] User Management Plugin

20 Reply by Dantes 2005-01-26 16:30

Re: [Release] User Management Plugin

21 Reply by Connorhd 2005-01-26 16:31

Re: [Release] User Management Plugin

22 Reply by Smartys 2005-01-26 18:10

Re: [Release] User Management Plugin

23 Reply by Rickard 2005-01-26 18:18

Re: [Release] User Management Plugin

24 Reply by Connorhd 2005-02-06 12:48

Re: [Release] User Management Plugin

25 Reply by Smartys 2005-02-06 12:50

Re: [Release] User Management Plugin

Posts: 1 to 25 of 72