Jump to content

(DP34) Denial of Service


DawPi

Recommended Posts

%7Boption%7D



File Name: (DP34) Denial of Service

File Submitter: DawPi

File Submitted: 18 Jan 2013

File Category: Security

Supported Versions: IP.Blog 2.5.x, IP.Blog 2.6.x, IP.Board 3.3.x, IP.Board 3.4.x, IP.Calendar 3.3.x, IP.Chat 1.4.x, IP.Content 2.3.x, IP.Downloads 2.4.x, IP.Downloads 2.5.x, IP.Gallery 4.2.x, IP.Gallery 5.0.x, IP.Nexus 1.5.x



With this mod you can force users to read and agree with your custom terms and rules before they can do anything on board.

Features:

  • Enable/disable system,
  • Exclude (or not) search engine bots from this mod.
  • Select excluded groups, they can acceess to the board even if they do not agree with rules.
  • Whitelist feature: if you want to allow access to specific pages, even without accept rules. It's helpfull for example for a contact pages etc.
  • Two message types: standard (with 15 second delayed time to activate agree button) and popup (can't be closed),
  • Special popup mode - allow members to preview what is on the requested page - but above it display the popup,
  • Cookie feature: number of days during which the user does not need to approve the access agreement form. Can be easily disabled.
  • Actions:
  • If you choose Force DOS agreement then users from selected groups/members will be must agree with rule set below.
  • If you choose Mark as forced then users from selected groups/members won't must agree with rule below.
  • Redirect settings: choose where you want redirect user after terms agreement. Available options: main page, specific forum/topic/post/announce by ID, main board page or custom URL.
  • Force read specific topic before user will be able to open other pages on board,
  • List of members - easy force them to agree rules with tiny information about each (name, mail, joined date, agree date, group name).


Delay time button presentation:





here to download this file

Link to comment
Share on other sites

  • Replies 52
  • Created
  • Last Reply

Currently giving me a redirect error on my forum.

Edit: I figure it out on a hunch. Your app is hardcoded to use HTTP redirects. On forums that use HTTPS (and redirect all http requests to https requests), this causes a loop.

(Fix I applied)

Line 118 of /void/applications_addon/other/denial/sources/classes/library.php

$user      = ((empty($_SERVER['HTTPS'])) ? 'http://' : 'https://') . $_SERVER['HTTP_HOST'] . $this->page_value;
Link to comment
Share on other sites

DawPi, on 20 Jan 2013 - 03:20, said:

Strange. It was tested on 4 boards and worked fine. Could you send me screenshot from the setting on PM or here?

Edited my post with the cause/fix. Thanks for the quick response.

(My response was slow because I wanted to make sure I was using ternary operators correctly before posting the fix, I think the above edit should be valid)

Suggestion,

When using the "popup" method, it just seems to be a method to prevent people from "clicking away." I thought this would actually preview the requested pages content and just require the user to accept before unlocking the page.

Do you think the app could be updated to work in such a manner? I know this is more of a disclaimer and not a "denial of service," but I think it could be really useful.

Link to comment
Share on other sites

I wrote that because I code it on 3.4 version.

Just checked it on 3.3.4 - doesnt work due to new editor stuff in 3.4 version BUT if you buy it I can prepare this mod to work on 3.3 series shortly (1-2 hours). ;) I've also updated the file details with this information.

Link to comment
Share on other sites

Suggestion,

When using the "popup" method, it just seems to be a method to prevent people from "clicking away." I thought this would actually preview the requested pages content and just require the user to accept before unlocking the page.

It's done and will be included in the next release, which is coming pretty fast. :)

Link to comment
Share on other sites

DawPi, on 22 Jan 2013 - 13:55, said:

Well, this is good idea also. :smile:

It will just be good to know and have it at the bottom or as a drop down, but its your mod so you decide, but whatever you do I am sure it will be fantastic

Best regards

colin

Link to comment
Share on other sites

I seem to get a bug when accepting the terms with the special popover box. Whenever accepting the terms and hitting continue, instead of the box just disappearing (or redirecting back to the same page the user was on), it gives a page with the following message:

Do you think it could be possible to simply have the box fade out when the user hits agree? (Possibly just submit the form using Javascript so the page doesn't have to reload)

Also, maybe a minor suggestion, what do you think about making the checkbox optional? (The admin can set whether he wants to require users to click the checkbox in the same sense they can optionally include a "decline" button).

I could apply this edit easily myself either way, but just figure I'd post it as a potential suggestion.

Link to comment
Share on other sites

Kirito, yes, there is this bug, but it has been fixed now. I'll release new files soon. Thank you. Just FYI: this error wasn't before, I must add new check to the code and forgot to add something else too. Anyway - it's fixed on my dev board now.

About the minor suggestion - sorry, I didn't get you fully. Could tou reiterate it one more time? Thanks and sorry.

Starwars, I'm working on it. ;)

Link to comment
Share on other sites

Starwars, what you think? On the screen from settings look at the bottom (last option).

pre_1358985395__screen_0.png' alt='' cla" alt="pre_1358985395__screen_0.png">

pre_1358985435__screen_13.png' alt='' cl" alt="pre_1358985435__screen_13.png">

This is redirecting from any other page than specified topic and displayin the closable popup with information. After reading user is marked as forced.

Is this what you wanted?

Link to comment
Share on other sites

My suggestion was just about making the box a disclaimer for users.

The box will show the message you have set as normal, but it will just have an accept and decline button. If the user hits accept, the box simply fades away and reveals the page to the user, they don't have to be redirected anywhere.

Link to comment
Share on other sites

I understand. Will check it, but later. I spend more time on this app than I expected lately, but I love my clients and wanted to make sure that they have everything what they want in this app. Now it's time to collect suggestions, fix bugs (hope none^^) and earn some $ for skiing (I feel in love with that!). pre_1358988938__ski.gif

It's acceptable?

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

  • Recently Browsing   0 members

    • No registered users viewing this page.

×
×
  • Create New...