Bravo List - TBDev Tobbies Edition

Page 1 of 2

Show 40 post(s) from this thread on one page

Bravo List (http://www.bvlist.com/index.php)

- Downloads (http://www.bvlist.com/forumdisplay.php?f=16)

- - TBDev Tobbies Edition (http://www.bvlist.com/showthread.php?t=794)

tobbie91@hotmail.com

7th August 2008 22:00

TBDev Tobbies Edition

1 Attachment(s)

Based on NetManiack 1.6

vafass

8th August 2008 11:45

Quote:

There was an error processing your request. Please wait while your request is retried in 10 seconds...

can you upload this source in rapid or another place? :)

johnake

8th August 2008 15:32

I'll give it a whirl :).

Fynnon

8th August 2008 15:40

Quote:

Originally Posted by vafass (Post 3252)

can you upload this source in rapid or another place? :)

You just need to use the forum`s attachments system!
Attach the file and then put around it the [hide] tags so the guests/leechers and enemy/thiefs that visit this forum won`t see it !

Thank You!

johnake

8th August 2008 15:57

Well, I just installed it...
You use a function that does not exist: htmlstrip. If I'm not mistaken, it was this:

PHP Code:


		
			
function htmlstrip($str) {
  return htmlspecialchars(htmlspecialchars_decode($str));
}

You're missing a column in the messages table called subject.

tobbie91@hotmail.com

8th August 2008 16:47

Quote:

Originally Posted by johnake (Post 3264)

Well, I just installed it...
You use a function that does not exist: htmlstrip. If I'm not mistaken, it was this:

PHP Code:


		
			
function htmlstrip($str) {
  return htmlspecialchars(htmlspecialchars_decode($str));
}

You're missing a column in the messages table called subject.

Read the install info

Quote:

#####IMPORTANT#####
12. In bittorrent.php at line 189 add user ids and on line 174 add all sysop name on the site.
!if you dont edit this you will get the error on the line under at almost every page!
Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191
#####IMPORTANT#####

its a security add ok:relax:

huly	9th August 2008 15:37

I just install this program

but error

Code:

Tracker sending invalid data:

why?

my passkey Always changes

djlee

9th August 2008 20:06

usually down to an incorrectly placed passkey system .. usually happens im afrraid to say when someone copies and pastes from the tbdev mod archive without reading through the whole thread correctly

iZ4R	10th August 2008 12:12

Can you let us know what things you changed ?:)

Fynnon

10th August 2008 14:45

Quote:

Originally Posted by iZ4R (Post 3298)

Can you let us know what things you changed ?:)

If you download the source you will find a changes.txt file with al modifications listed in it:
[QUOTE]
-------------------------------------------------------------------------------------------
Version 1.7 [07.08.2008] all work from v1.6 and up is done by Tobbie
-------------------------------------------------------------------------------------------
added turn on/off Last 5 forum posts on index to my.php
added Top Forum Posters by carphunter18 in topten.php
added Last 5 forum posts by bodhisattva on index.php
added Search by country in users.php by DJMcTom
added New Report mod by Sir_SnuggleBunny
added some better design on the site
added a better design to browse and some more functions
added More functions at forum by omer
added Delete User in userdetails.php by stonebreath
added Delete Inactive Torrents by Piter21
added Signature Mod by Wilba
added a basic Torrents Needing Seeds page by norris
added a better staff page
added more translation words to english.lang
removed avatar in inbox.php by nighthawk (not looking very good)
added Max. Sysops and Admins v0.1 by xam
added Bad Password checker by LonniE modded by dokty
added Showing mb/day, uploaded downloaded Daily in userdetails by samehzone
edited up/down arrows in statusbar
edited search section and other stuff in log.php
added almost added all the words in the site to the english translation file
edited menu so that only moderators and up can see staffpanel.php insted of uploaders
edited menu so that only uploaders and up can see upload.php insted of vip
edited menu so that only powerusers and up can see viewrequests.php and viewoffers.php insted of vip
moved Profile link from menu to the statusbar
added background-image to td.colhead in default/large.css
added colhead.png to the pic folder
added menu.png to the pic folder
added colhead to menu in my.php
added colhead and changed the width in staffpanel.php
added colhead to the search section in log.php
added colhead to announce url menu in upload.php
edited width in my.php
added fixed sql injection viewoffers.php and viewrequests.php
added a section in the forums for testing
added td.menu in default/large.css
added 6 failed logins by XAM
edited the width on the site
added Top 10 torrents by patrikmuse
added turn on/off Top 10 torrents on index to my.php
added viewnfo.php with DOS-vy and Windows-vy by Angel
added Clickable thank you button by be4i
added HTACCESS to torrent folder
added Script to see the avatars of all the members (ava.php)
optimized ava.php so it

tobbie91@hotmail.com

11th August 2008 15:11

Add it to your sql db in users and the users will get a specific passkey so it don

snakebite

11th August 2008 23:24

Quote:

Originally Posted by huly (Post 3282)

I just install this program

but error

Code:

Tracker sending invalid data:

why?

my passkey Always changes

You just got to fill in your db info into announce.php

huly	12th August 2008 10:30

Quote:

Originally Posted by snakebite (Post 3362)

You just got to fill in your db info into announce.php

thanks,how fill my db info into announce.php??

$mysql_host = "localhost";
$mysql_user = "root";
$mysql_pass = "123456";
$mysql_db = "torrents";

is this???

snakebite

12th August 2008 14:53

Quote:

Originally Posted by huly (Post 3363)

thanks,how fill my db info into announce.php??

$mysql_host = "localhost";
$mysql_user = "root";
$mysql_pass = "123456";
$mysql_db = "torrents";

is this???

jup !
that's the place :D

HIENA

13th August 2008 00:22

please can somebody tell me where i edited in bittorrent i don`t understand where i edite
Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website? HIENA

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("Admin"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

Neptune

13th August 2008 02:27

HIENA

13th August 2008 02:40

i reed but i don`t understand in line 189 where i put the name

Krypto

13th August 2008 08:13

Change the highlighted text to your username

$lsysopnames = array("Admin"); // Case sensitive.

snakebite

13th August 2008 08:15

Quote:

Originally Posted by HIENA (Post 3392)

please can somebody tell me where i edited in bittorrent i don`t understand where i edite
Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website? HIENA

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("Admin"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website? HIENA

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("here you put your username"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

HIENA

13th August 2008 10:54

i write there but not working

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website? HIENA

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("HIENA"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

autotron

13th August 2008 16:13

you also need to enter your user ID a few lines lower here

Code:

if(get_user_class() >= UC_MODERATOR){

   $adminids = array(8,9,xx);    // put your admins id in here like this (1,1553,956,12414)

wMan	13th August 2008 20:35

take maxsysops out

HIENA

14th August 2008 01:02

not work same massage

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website?

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("HIENA"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

      $msg="Fake Account Detected: Username: ."]".$CURUSER["username"]." - UserID: ".$CURUSER["id"]." - UserIP : ".getip();

      $subject="Fake account detected, greater than SysOp!";

      mysql_query("INSERT INTO messages (poster, sender, receiver, added, msg, subject) VALUES(0, 0, 1, '" . get_date_time() . "', " .sqlesc($msg) . ", ".sqlesc($subject).")") or sqlerr(__FILE__, __LINE__);

        stderr("Locked!","We come to believe you are using a fake account, therefore we've logged this action, and disabled your account!"); // die

        }

if(get_user_class() >= UC_MODERATOR){

   $adminids = array(5,x,xx);    // put your admins id in here like this (HIENA)

   if (!in_array($CURUSER['id'], $adminids)){

Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191

djlee

14th August 2008 01:32

ok im bored of bad sources lol .. its simple

1. change all htmlstrip functions to htmlspecialchars (or dont bother with um altogether as your only writting to a log)

2. if you cant be arsed changing them use the htmlstrip function posted earlier by a user whom i forgot his name.

3. THIS IS NOT A SECURITY PRECAUTION... what is really is if anything is a security problem.. by outputting the error your giving the script kiddie simple and easy to find information on the http web serving path of the server. From that the script kiddie can then hazzard a guess at your op system AND the path to everything within your server. most of you probably use the default http serving path setup by the http web server... this is usually determined by either the cpanel used to manage the sites on the server or in some cases on the operating system on the server (and its file system layout)... So by giving the undefined function error your simply giving the hacker more info to use against you

4. Another thing is this isn't no more of a security precaution as removing the writelog function completely.. the whole idea of the write_log thats there is to notify you of privilege escalation.. if the undefined function kills the php execution this means the writelog is never performed AND you dont get any info apart from knowing your site is dead due to a hacker .. no user id, no username.. no IP at hand so u better search the sql for that info cause it wont be in any log

the coder has tried to provide a secure code but has unfortunately failed to do so. Im not trying to be mean or nasty but if everyone were releasing unstanble code thered be a lot of unhappy people around spamming communities like ourselves.

I felt this needed to be posted in this manner to let you all know how unsecure this code is .. covering up a mess up with a security precaution idea is not good enough and it will cause major problems in the long run

i would suggest to tobbie to fix this error and r-check all his code .. there is a great xss and sql precaution thread on the tbdev forums that will help you find some of the more common errors and many code fixes posted in the mods section. If you can fix up the source and repost a better vesion im sure your source will receive a lot better reputation and i wish you all the best :)

gd luck and please make sure you rectify this main problem before people forget about your source and your hard work and time goes to waste

pablozl

15th August 2008 19:43

thanks :relax:

voicu

16th August 2008 18:54

error

Parse error: syntax error, unexpected $end in C:\xampp\htdocs\include\bittorrent.php on line 1514

Hasztex

17th August 2008 19:47

Localhost

Hello!
This works really good actually. There's just one thing. All the users has the IP "127.0.0.1 (localhost)" And I can upload torrents. And I can seed them. But in uTorrent 1.8 it is red and it doesn't seed on the tracker. But the torrent is there but invisible (dead)

Any fix for this?

Robz	18th August 2008 19:24

Hi! Great modded version of TBDev, rly appriciate it!

BUT when i upload a torrent to my tracker, i get an error message and i cant connect to the tracker in azureus.

I get this:

Connection Error (invalid reply:

Fatal Error: Unknown function: getallheaders () in blablabla

Any idea on how to fix this? I tried to remove that function, but then it complains about that there is no such function as maxsysops in the same file announce.php.

Please help me here :)

DocSnYder

26th August 2008 00:11

thx for that, im just giving it a try on my space ;)

LANDSER

30th August 2008 13:54

Quote:

Originally Posted by HIENA (Post 3432)

not work same massage

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website?

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("HIENA"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

      $msg="Fake Account Detected: Username: ."]".$CURUSER["username"]." - UserID: ".$CURUSER["id"]." - UserIP : ".getip();

      $subject="Fake account detected, greater than SysOp!";

      mysql_query("INSERT INTO messages (poster, sender, receiver, added, msg, subject) VALUES(0, 0, 1, '" . get_date_time() . "', " .sqlesc($msg) . ", ".sqlesc($subject).")") or sqlerr(__FILE__, __LINE__);

        stderr("Locked!","We come to believe you are using a fake account, therefore we've logged this action, and disabled your account!"); // die

        }

if(get_user_class() >= UC_MODERATOR){

   $adminids = array(5,x,xx);    // put your admins id in here like this (HIENA)

   if (!in_array($CURUSER['id'], $adminids)){

Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191

Code:

function maxsysop () {

global $CURUSER;

$lmaxsysop = 4; // How many sysop account on your website?

$lmaxclass  = 6; // Max. Class, e.g: mine is: define ("UC_SYSOP", 8);

$lsysopnames = array("HIENA"); // Case sensitive.

$query = mysql_query("SELECT COUNT(id) AS total FROM users WHERE class >= $lmaxclass")  or sqlerr(__FILE__, __LINE__); // get total sysops

list($info['maxsysop']) = mysql_fetch_row($query); // list



if ($info['maxsysop'] > $lmaxsysop)

    if ($CURUSER['class'] >= $lmaxclass)

      if (!in_array($CURUSER["username"], $lsysopnames)){

      write_log(htmlstrip($CURUSER['username'])." changed themselves to class ".htmlstrip($CURUSER['class']).". Current page: $_SERVER[PHP_SELF], previous page: $_SERVER[HTTP_REFERER]");

       mysql_query("UPDATE users set enabled='no' WHERE id=$CURUSER[id]");

      $msg="Fake Account Detected: Username: ."]".$CURUSER["username"]." - UserID: ".$CURUSER["id"]." - UserIP : ".getip();

      $subject="Fake account detected, greater than SysOp!";

      mysql_query("INSERT INTO messages (poster, sender, receiver, added, msg, subject) VALUES(0, 0, 1, '" . get_date_time() . "', " .sqlesc($msg) . ", ".sqlesc($subject).")") or sqlerr(__FILE__, __LINE__);

        stderr("Locked!","We come to believe you are using a fake account, therefore we've logged this action, and disabled your account!"); // die

        }

if(get_user_class() >= UC_MODERATOR){

   $adminids = array(HIENA);    // put your admins id in here like this (HIENA)

   if (!in_array($CURUSER['id'], $adminids)){

ps: is some one to do to work this surce?(sory for my enghlis)
I do this:
"12. In bittorrent.php at line 189 add user ids and on line 174 add all sysop name on the site.
!if you dont edit this you will get the error on the line under at almost every page!
Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191"
i have this eror:
Fatal error: Call to undefined function htmlstrip() in C:\xampp\htdocs\include\bittorrent.php on line 191
Reply With Quote

voicu

31st August 2008 09:22

plz help

Please help with this error :

Code:

Parse error: syntax error, unexpected $end in C:\xampp\htdocs\include\bittorrent.php on line 1512

:sos:

konvolut

1st September 2008 16:52

works....

ty

Subzero

1st September 2008 18:52

Nice

Nice m8 works grate

shyden

4th September 2008 07:48

cannot login

I have installed the coding and done the 2 edits in bittorrent.php but i cannot log in with any account i create...

If i try to login with a user account that doesn't exists i recieve an error but when i try to log in with a valid account it just takes me back to the login screen.

I've come to the conclusion that the cookie system isnt working bout i dont know how to fix this :sorry:

Rampage

4th September 2008 11:07

thank you are the best

empereur

8th September 2008 19:27

donn

j'ai un probl

thanzero

11th September 2008 05:50

thank you :hi::hi:

cobrax

13th September 2008 08:51

white page

can someone tell me why i get a white page???

TheLegend

14th September 2008 21:55

Big problem!

I have a big problem whith this source!When I try to download a torrent they says me that have 0 seeders but they already have seeds!So i can upload,i can seed,but noone can download.Can someone help me?!:wallbash:

LORD26

21st September 2008 17:42

help please

hello

i use your tbdev .

and i have this problem:
-all new user is pending -how to change this?
-and they don't recive any mail to confirm ????
-and also in the mass mail :error ?????

thnak you

All times are GMT +2. The time now is 14:59.

Page 1 of 2

Show 40 post(s) from this thread on one page