php forum
php mysql forum
php mysql smarty
 
Topic Options
#37174 - 03/31/00 11:31 AM Email Password Hack
Parker Clack Offline
Member

Registered: 01/11/00
Posts: 98
Loc: Midwest Missouri
Some of the people that sign up on our board know that they can click on the "Forgot your password?" link and have their password emailed to them.

We check all registrations to our board as we require the use of real names instead of handles. We do not send them a password until we check out the username they sign up with.

Some people know that after they register they can go to the link to have their password emailed to them even though they might not have their username accepted.

So to get around this I have added the following code:

In Ubbmisc.cgi

Look for:

sub PWRequest {
# Find the right registration
&GetMemberListArray;
&GetEmails; # returns @EmailList array
$Found = "";

#lowercase the email input
$sendto = lc($in{'sendto'});
$CountIt = 0;
foreach $emailline(@EmailList) {
($theemail, $thenumber) = split(/??/, $emailline);
$theemail = lc("$theemail");

if ($theemail eq "$sendto") {
chomp($thenumber);
@thisprofile = &OpenProfile("$thenumber.cgi");
$YourName = "$thisprofile[0]";
$YourPassword = "$thisprofile[1]";
$CountIt = $CountIt + 1;
$Found = "yes";
}
}

if ($CountIt >= 2) {
&StandardHTML("<center>Sorry, we cannot process your request because more than one person is using that email address.</center>");
exit;
}

and replace it with:

sub PWRequest {
# Find the right registration
&GetMemberListArray;
&GetEmails; # returns @EmailList array
$Found = "";

#lowercase the email input
$sendto = lc($in{'sendto'});
$CountIt = 0;
foreach $emailline(@EmailList) {
($theemail, $thenumber) = split(/??/, $emailline);
$theemail = lc("$theemail");

if ($theemail eq "$sendto") {
chomp($thenumber);
@thisprofile = &OpenProfile("$thenumber.cgi");
$YourName = "$thisprofile[0]";
$YourPassword = "$thisprofile[1]";
$MessageCount = "$thisprofile[7]";
$CountIt = $CountIt + 1;
$Found = "yes";
}
}

if ($CountIt >= 2) {
&StandardHTML("<center>Sorry, we cannot process your request because more than one person is using that email address.</center>");
exit;
}

if ($MessageCount <=0) {
&StandardHTML("<center>Sorry, we cannot process your request because you have not posted a message yet!</center>");
exit;
}


The italisized lines being the ones to add to the original code.

Parker

Top



Latest Posts
[7.2.1] - Naked shoutbox
by bellaonline
05/05/12 05:00 PM
[7.x] Stop Forum Spam Integration v0.4
by bellaonline
05/05/12 03:53 PM
Shout Box

(Views)Popular Topics
Known public proxy servers 1689885
Integrated Index Page (IIP) 5.3.1 555705
Finished-[6.5.2] Games Arcade Deluxe v1.9 501236
Integrated Index Page (IIP) 5.1.1 415112
TLD Bv2.1 Released - Threads Links Directory 396822
[6.0x] Who's Online 4.0.0 [Finished] 389412
Finished-[6.5.1] Integrated Index Page (IIP) 6.5 330423
Q & A 298663
Slash UBB 266936
[6.3.x] [beta] Hit Hack 2.0 227970
Forum Stats
13621 Members
59 Forums
37191 Topics
295716 Posts

Max Online: 686 @ 06/28/07 07:04 AM

 

 

 
fusionbb message board php hacks