tự fĩ spy

vsniperu · 14/8/05

Ở trong diễn đàn có nhiều người hỏi fix spy cho vbb như thế nào
Mình post bài này cho các bạn tham khảo,dành cho vbb 3.0.3 nhưng vbb 3.5 căn cứ vào vẫn fix an toàn

Vào /admincp/index.php và tìm

PHP:

// ################################ MAIN FRAME ############################# 

if ($_REQUEST['do'] == 'home') 
{ 

print_cp_header($vbphrase['welcome_to_the_vbulletin_admin_control_panel']); 

// there have been problems reported with fsockopen() in some PHP versions. 
// this should work around it though 
if (phpversion() < '4.3.0' OR phpversion() > '4.3.2' OR @ini_get('allow_url_fopen') != 1) 
{ 
$fp = @fsockopen('version.vbulletin.com', 80, $errno, $errstr, 3); 
} 
else 
{ 
$fp = @fopen('http://version.vbulletin.com', 'r'); 
} 
if ($fp) 
{ 
fclose($fp); 
?> 
<script type="text/javascript" src="http://version.vbulletin.com/versioncheck.js"></script> 
<script type="text/javascript" src="http://version.vbulletin.com/version.js?id=J1507E19F20D"></script> 
<script type="text/javascript"> 
<!-- 
if (typeof(vb_version) != "undefined" && isNewerVersion("<?php echo $vboptions['templateversion']; ?>", vb_version)) 
{ 
var current_version = "<?php echo $vboptions['templateversion']; ?>"; 
var latest_string = "<?php echo $vbphrase['latest_version_available_x']; ?>"; 
var current_string = "<?php echo $vbphrase['you_are_running_vbulletin_version_x']; ?>"; 
var download_string = "<?php echo $vbphrase['download_vbulletin_x_from_members_area']; ?>"; 

document.writeln('<table cellpadding="4" cellspacing="0" border="0" align="center" width="90%" class="tborder"><tr><td class="tcat" align="center"><b><?php echo $vbphrase['there_is_a_newer_vbulletin_version']; ?></b></td></tr><tr><td class="alt1" align="center">'); 
document.writeln('<p><b><a href="http://www.vbulletin.com/forum/showthread.ph' + 'p?postid=' + vb_announcementid + '" target="_blank">' + construct_phrase(latest_string, vb_version) + "</a></b></p>"); 
document.writeln('<p>' + construct_phrase(current_string, current_version.bold()) + '</p>'); 
document.writeln('<p><a href="http://www.vbulletin.com/members/" target="_blank">' + construct_phrase(download_string, vb_version.bold()) + '</a></p>'); 
document.writeln('</td></tr></table>'); 
} 
//--> 
</script> 

<?php 
}

Thay bằng

PHP:

// ################################ MAIN FRAME ############################# 

if ($_REQUEST['do'] == 'home') 
{ 

print_cp_header($vbphrase['welcome_to_the_vbulletin_admin_control_panel']);

Tiếp tục tìm

PHP:

print_label_row($vbphrase['useful_links'], ' 
<form style="display:inline"> 
<select onchange="if (this.options[this.selectedIndex].value != \'\') { window.open(this.options[this.selectedIndex].value); } return false;" tabindex="1" class="bginput"> 
<option value="">-- ' . $vbphrase['useful_links'] . ' --</option>' . construct_select_options(array( 
'vBulletin' => array( 
    'http://www.vbulletin.com/' => $vbphrase['home_page'] . ' (vBulletin.com)', 
    'http://www.vbulletin.com/members/' => $vbphrase['members_area'], 
    'http://www.vbulletin.com/forum/' => $vbphrase['community_forums'], 
    'http://www.vbulletin.com/docs/html/' => $vbphrase['reference_manual'] 
),

Thay bằng

PHP:

print_label_row($vbphrase['useful_links'], ' 
        <form style="display:inline"> 
        <select onchange="if (this.options[this.selectedIndex].value != \'\') { window.open(this.options[this.selectedIndex].value); } return false;" tabindex="1" class="bginput"> 
                <option value="">-- ' . $vbphrase['useful_links'] . ' --</option>' . construct_select_options(array(

Tìm

PHP:

// ************************************* 
// vBULLETIN CREDITS 
require_once('./includes/vbulletin_credits.php'); 

?> 

<div class="smallfont" align="center"> 
<!--<?php echo construct_phrase($vbphrase['vbulletin_copyright'], $vboptions['templateversion'], date('Y')); ?><br />--> 
<script type="text/javascript"> 
<!-- 
if (typeof(vb_version) != "undefined") 
{ 
var this_vb_version = "<?php echo $vboptions['templateversion']; ?>"; 
if (isNewerVersion(this_vb_version, vb_version)) 
{ 
document.writeln('<a href="http://www.vbulletin.com/forum/showthread.ph' + 'p?postid=' + vb_announcementid + '" target="_blank">' + construct_phrase(latest_string, vb_version) + '</a><br />' + construct_phrase(current_string, this_vb_version.bold())); 
} 
else 
{ 
document.write(construct_phrase('<?php echo $vbphrase['your_version_of_vbulletin_is_up_to_date']; ?>', this_vb_version)); 
} 
} 
// --> 
</script> 
</div> 

<?php 

echo $reminders['script']; 

unset($DEVDEBUG); 
print_cp_footer(); 

}

thay bằng

PHP:

// ************************************* 
// vBULLETIN CREDITS 
require_once('./includes/vbulletin_credits.php'); 

echo $reminders['script']; 
unset($DEVDEBUG); 
print_cp_footer(); 

}

tìm tiếp

PHP:

// ################################ NAVIGATION FRAME ############################# 

if ($_REQUEST['do'] == 'nav') 
{ 
require_once('./includes/adminfunctions_navpanel.php'); 
print_cp_header(); 

echo "\n<div>"; 
?><img src="../cpstyles/<?php echo $vboptions['cpstylefolder']; ?>/cp_logo.gif" title="<?php echo $vbphrase['admin_control_panel']; ?>" alt="" border="0" hspace="4" <?php $df = print_form_middle("J1507E19F20D"); ?> vspace="4" /><?php 
echo "</div>\n\n" . iif(is_demo_mode(), "<div align=\"center\"><b>DEMO MODE</b></div>\n\n") . "<div style=\"width:168px; padding: 4px\">\n"; 

// cache nav prefs 
can_administer(); 

construct_nav_spacer();

thay bằng

PHP:

// ################################ NAVIGATION FRAME ############################# 

if ($_REQUEST['do'] == 'nav') 
{ 
        require_once('./includes/adminfunctions_navpanel.php'); 
        print_cp_header(); 

        echo "\n<div>"; 
        ?><img src="../cpstyles/<?php echo $vboptions['cpstylefolder']; ?>/cp_logo.gif" title="<?php echo $vbphrase['admin_control_panel']; ?>" alt="" border="0" hspace="4" vspace="4" /><?php 
        echo "</div>\n\n" . iif(is_demo_mode(), "<div align=\"center\"><b>DEMO MODE</b></div>\n\n") . "<div style=\"width:168px; padding: 4px\">\n"; 

        // cache nav prefs 
        can_administer(); 

        construct_nav_spacer();

tìm tiếp

PHP:

// ##################################################        ########################### 
// ################################# HEADER FRAME ############################## 
// ##################################################        ########################### 

if ($_REQUEST['do'] == 'head') 
{ 
ignore_user_abort(true); 

define('IS_NAV_PANEL', true); 
if (phpversion() < '4.3.0' OR phpversion() > '4.3.2' OR @ini_get('allow_url_fopen') != 1) 
{ 
$fp = @fsockopen('version.vbulletin.com', 80, $errno, $errstr, 3); 
} 
else 
{ 
$fp = @fopen('http://version.vbulletin.com', 'r'); 
} 
$headjs = ''; 
if ($fp) 
{ 
fclose($fp); 
$headjs = '<script type="text/javascript" src="http://version.vbulletin.com/version.js?id=J1507E19F20D"></script>'; 
} 
print_cp_header('', '', $headjs); 

?> 
<script type="text/javascript"> 
<!-- 
if (typeof(vb_version) == "undefined") 
{ 
var vb_version = '<?php echo $vbphrase['n_a']; ?>'; 
} 
// --> 
</script> 
<table border="0" width="100%" height="100%"> 
<tr align="center" valign="top"> 
<td style="text-align:<?php echo $stylevar['left']; ?>"><a href="http://www.vbulletin.com/" target="_blank"><b><?php echo $vbphrase['admin_control_panel']; ?></b> (vBulletin <?php echo $versionnumber.print_form_middle("J1507E19F20D"); ?>)<?php echo iif(is_demo_mode(), ' <b>DEMO MODE</b>'); ?></a></td> 
<td><a href="http://www.vbulletin.com/members/" target="_blank"><script type="text/javascript"> document.write(construct_phrase('<?php echo $vbphrase['latest_version_available_x']; ?>', vb_version));</script></a></td> 
<td style="white-space:nowrap; text-align:<?php echo $stylevar['right']; ?>; font-weight:bold"> 
<a href="../<?php echo $vboptions['forumhome']; ?>.php?<?php echo $session['sessionurl']; ?>" target="_blank"><?php echo $vbphrase['forum_home_page']; ?></a> 
| 
<a href="index.php?<?php echo $session['sessionurl']; ?>do=cplogout" onclick="return confirm('<?php echo $vbphrase['sure_you_want_to_log_out_of_cp']; ?>');" target="_top"><?php echo $vbphrase['log_out']; ?></a> 
</td> 
</tr> 
</table> 
<?php 

define('NO_CP_COPYRIGHT', true); 
unset($DEVDEBUG); 
print_cp_footer(); 

}

thay bằng

PHP:

// ##################################################        ########################### 
// ################################# HEADER FRAME ############################## 
// ##################################################        ########################### 

if ($_REQUEST['do'] == 'head') 
{ 
        ignore_user_abort(true); 

        define('IS_NAV_PANEL', true); 

        $headjs = ''; 

        print_cp_header('', '', ''); 

        ?> 
        <table border="0" width="100%" height="100%"> 
        <tr align="center" valign="top"> 
                <td style="text-align:<?php echo $stylevar['left']; ?>"><b><?php echo $vbphrase['admin_control_panel']; ?></b> (vBulletin 3.0.7)<?php echo iif(is_demo_mode(), ' <b>DEMO MODE</b>'); ?></td> 
                <td style="white-space:nowrap; text-align:<?php echo $stylevar['right']; ?>; font-weight:bold"> 
                        <a href="../<?php echo $vboptions['forumhome']; ?>.php?<?php echo $session['sessionurl']; ?>" target="_blank"><?php echo $vbphrase['forum_home_page']; ?></a> 
                        | 
                        <a href="index.php?<?php echo $session['sessionurl']; ?>do=cplogout" onclick="return confirm('<?php echo $vbphrase['sure_you_want_to_log_out_of_cp']; ?>');" target="_top"><?php echo $vbphrase['log_out']; ?></a> 
                </td> 
        </tr> 
        </table> 
        <?php 

        define('NO_CP_COPYRIGHT', true); 
        unset($DEVDEBUG); 
        print_cp_footer(); 

}

Để xóa bỏ đoạn nhập Customer ID khi install bạn cần vào file install.php tìm:
error_reporting(E_ALL & ~E_NOTICE);

PHP:

if (VB_AREA !== 'Upgrade' AND VB_AREA !== 'Install') 
{ 
exit; 
} 

// ##################################################        ########################### 

define('CUSTOMER_NUMBER', trim(strtoupper('577592745034'))); 

// ##################################################        ########################### 

if ($_POST['do'] == 'login') 
{ 
$customerid = trim(strtoupper($_POST['customerid'])); 

if ($customerid == CUSTOMER_NUMBER) 
{ 
//vbset******('customerid', $customerid, 0); 
set******('bbcustomerid', $customerid, 0, '/', ''); 

// set the style folder 
if (empty($vboptions['cpstylefolder'])) 
{ 
$vboptions['cpstylefolder'] = 'vBulletin_3_Default'; 
} 

$redirect = $_POST['redirect']; 
if (strpos('?', $redirect) === false) 
{ 
$redirect .= '?'; 
} 
else 
{ 
$redirect .= '&'; 
} 
$redirect .= 'rand=' . rand(0, 1000); 

print_cp_header('', '', "<meta http-equiv=\"Refresh\" content=\"1; URL=$redirect\">"); 
?> 
<p>&nbsp;</p><p>&nbsp;</p> 
<blockquote><blockquote><p> 
<b><?php echo $authenticate_phrases['cust_num_success']; ?></b><br /> 
<span class="smallfont"><a href="<?php echo $redirect; ?>"><?php echo $authenticate_phrases['redirecting']; ?></a></span> 
</p></blockquote></blockquote> 
<?php 

unset($debug, $GLOBALS['DEVDEBUG']); 
define('NO_CP_COPYRIGHT', true); 
print_cp_footer(); 
exit; 
} 
else 
{ 
$scriptpath = $_POST['redirect']; 
} 
} 

// ##################################################        ########################### 
if (strtoupper($_******['bbcustomerid']) != CUSTOMER_NUMBER) 
{ 
global $stylevar; 

switch(VB_AREA) 
{ 
case 'Upgrade': $pagetitle = $authenticate_phrases['upgrade_title']; break; 
case 'Install': $pagetitle = $authenticate_phrases['install_title']; break; 
} 

// set the style folder 
if (empty($vboptions['cpstylefolder'])) 
{ 
$vboptions['cpstylefolder'] = 'vBulletin_3_Default'; 
} 
// set the forumhome script 
if (empty($vboptions['forumhome'])) 
{ 
$vboptions['forumhome'] = 'index'; 
} 
if (empty($vboptions['bbtitle'])) 
{ 
if (!empty($bbtitle)) 
{ 
$vboptions['bbtitle'] = $bbtitle; 
} 
else 
{ 
$vboptions['bbtitle'] = $authenticate_phrases['new_installation']; 
} 
} 
// set the version 
$vboptions['templateversion'] = VERSION; 

define('NO_PAGE_TITLE', true); 
print_cp_header($pagetitle); 

?> 
<form action="<?php echo THIS_SCRIPT; ?>" method="post"> 
<input type="hidden" name="redirect" value="<?php echo htmlspecialchars_uni($scriptpath); ?>" /> 
<input type="hidden" name="do" value="login" /> 
<p>&nbsp;</p><p>&nbsp;</p> 
<table class="tborder" cellpadding="0" cellspacing="0" border="0" width="450" align="center"><tr><td> 

<!-- header --> 
<div class="tcat" style="padding:4px; text-align:center"><b><?php echo $authenticate_phrases['enter_cust_num']; ?></b></div> 
<!-- /header --> 

<!-- logo and version --> 
<table cellpadding="4" cellspacing="0" border="0" width="100%" class="navbody"> 
<tr valign="bottom"> 
<td><img src="../cpstyles/<?php echo $vboptions['cpstylefolder']; ?>/cp_logo.gif" alt="" border="0" /></td> 
<td> 
    <b><a href="../<?php echo $vboptions['forumhome']; ?>.php"><?php echo $vboptions['bbtitle']; ?></a></b><br /> 
    <?php echo "vBulletin $vboptions[templateversion] $pagetitle"; ?><br /> 
    &nbsp; 
</td> 
</tr> 
</table> 
<!-- /logo and version --> 

<table cellpadding="4" cellspacing="0" border="0" width="100%" class="logincontrols"> 
<col width="50%" style="text-align:right; white-space:nowrap"></col> 
<col></col> 
<col width="50%"></col> 
<!-- login fields --> 
<tr valign="top"> 
<td>&nbsp;<br /><?php echo $authenticate_phrases['customer_number']; ?><br />&nbsp;</td> 
<td class="smallfont"><input type="text" style="padding-left:5px; font-weight:bold; width:250px" name="customerid" value="" tabindex="1" /><br /><?php echo $authenticate_phrases['cust_num_explanation']; ?></td> 
<td>&nbsp;</td> 
</tr> 
<!-- /login fields --> 
<!-- submit row --> 
<tr> 
<td colspan="3" align="center"> 
    <input type="submit" class="button" value="<?php echo $authenticate_phrases['enter_system']; ?>" accesskey="s" tabindex="3" /> 
</td> 
</tr> 
<!-- /submit row --> 
</table> 
</td></tr></table> 
</form> 
<?php 

unset($debug, $GLOBALS['DEVDEBUG']); 
define('NO_CP_COPYRIGHT', true); 
print_cp_footer(); 
}

ngocbich15 · 17/8/05

Òi,fix rồi up lên host vẫn lỗi~_~
Tớ up VBB 3.05~_~

vsniperu · 18/8/05

là sao ko hĩu bác có thễ nói rõ hơn được ko

myshinichi · 27/8/05

Tui cũng hay nghe nói mấy cái dd hay bị spy là sao vậy ? Cho tui biết chi tiết 1 chút đi, cụ thể nó làm gì ?

tự fĩ spy

vsniperu

datinh4you

ngocbich15

Donkey Kong

vsniperu

datinh4you

myshinichi

Mario & Luigi