Uniuploader, phpbb auth, and roster update password

Support and feedback for UniUploader
UniUploader requires microsoft .net runtimes!

Uniuploader, phpbb auth, and roster update password

Postby DragonWin » Wed Jul 19, 2006 7:27 pm

If you try to use uniuploader with a roster where phpbb authentication is enabled you cannot just set the additional key/values to your phpbb login, and then pop another key/value pair in for the roster update password, as both phpbb and the roster update page uses the name password for the password.

Warning if you do this your username/password for phpbb, and your roster update password is sent in clear text to the server. All three are also in clear text in the settings.ini file in your uniuploader folder

So a quick fix is

find
Code: Select all
<td class=\"membersRowRight2\"><input type=\"password\" name=\"password\"></td>


replace with
Code: Select all
<td class=\"membersRowRight2\"><input type=\"password\" name=\"uupassword\"></td>


find
Code: Select all
<td class=\"membersRowRight1\"><input type=\"password\" name=\"password\"></td>


replace with
Code: Select all
<td class=\"membersRowRight1\"><input type=\"password\" name=\"uupassword\"></td>


find
Code: Select all
if( is_array($uploadData['myProfile']) && isset($_POST['password']) )
{
   if( (md5($_POST['password']) == $roster_conf['roster_upd_pw']) || ($_POST['password'] == $roster_conf['roster_upd_pw']) )
   {
      $rosterUpdateMessages = processGuildRoster($uploadData['myProfile']);
   }
}


replace with
Code: Select all
if( is_array($uploadData['myProfile']) && isset($_POST['uupassword']) )
{
   if( (md5($_POST['uupassword']) == $roster_conf['roster_upd_pw']) || ($_POST['uupassword'] == $roster_conf['roster_upd_pw']) )
   {
      $rosterUpdateMessages = processGuildRoster($uploadData['myProfile']);
   }
}


Start uniuploader go into options, and look for Additional Variables.

In the first field type username 2nd field type [your-phpbb-login-name]
In the 3rd field type password 4th field type [your-phpbb-login-password]
in the 5th field type uupassword 6th field type [your-roster-update-password]

And you should now be able to update the roster list and not only your own chars with uniuploader.

Tested with roster version 1.7.0 and uniuploader version 2.4.1
Last edited by DragonWin on Wed Jul 19, 2006 7:28 pm, edited 1 time in total.
DragonWin
WR.net Apprentice
WR.net Apprentice
 
Posts: 2
Joined: Wed Jul 19, 2006 1:09 pm

Uniuploader, phpbb auth, and roster update password

Postby zanix » Thu Jul 20, 2006 3:34 am

Now, if we can just get the code from a very smart person from the old forums, then the roster admin pass won't be needed when using phpbb auth

This is the post where I requested this code
Request for Modified phpBB Auth
Read the Forum Rules, the WiKi, and Search before posting!
WoWRoster v2.1 - SigGen v0.3.3.523 - WoWRosterDF
User avatar
zanix
Admin
Admin
WoWRoster.net Dev Team
WoWRoster.net Dev Team
UA/UU Developer
UA/UU Developer
 
Posts: 5546
Joined: Mon Jul 03, 2006 8:29 am
Location: Idaho Falls, Idaho
Realm: Doomhammer (PvE) - US

Re: Uniuploader, phpbb auth, and roster update password

Postby Snipes » Wed Sep 20, 2006 5:36 pm

Is this solution integrated in roster 1.7.0 or got it lost due to the forum crash in july?
User avatar
Snipes
WR.net Apprentice
WR.net Apprentice
 
Posts: 20
Joined: Wed Jul 05, 2006 7:22 pm

Uniuploader, phpbb auth, and roster update password

Postby zanix » Thu Sep 21, 2006 7:27 am

It got lost in the forum crash
Also, any phpbb integration in roster will be gone in version 1.7.1
Read the Forum Rules, the WiKi, and Search before posting!
WoWRoster v2.1 - SigGen v0.3.3.523 - WoWRosterDF
User avatar
zanix
Admin
Admin
WoWRoster.net Dev Team
WoWRoster.net Dev Team
UA/UU Developer
UA/UU Developer
 
Posts: 5546
Joined: Mon Jul 03, 2006 8:29 am
Location: Idaho Falls, Idaho
Realm: Doomhammer (PvE) - US


Return to UniUploader

Who is online

Users browsing this forum: No registered users and 1 guest

cron