tự fĩ spy

Thảo luận trong 'Lập trình & Đồ hoạ' bắt đầu bởi vsniperu, 14/8/05.

  1. vsniperu

    vsniperu datinh4you

    Tham gia ngày:
    11/4/05
    Bài viết:
    2,154
    Ở trong diễn đàn có nhiều người hỏi fix spy cho vbb như thế nào
    Mình post bài này cho các bạn tham khảo,dành cho vbb 3.0.3 nhưng vbb 3.5 căn cứ vào vẫn fix an toàn

    Vào /admincp/index.php và tìm
    PHP:
    // ################################ MAIN FRAME ############################# 

    if ($_REQUEST['do'] == 'home') 


    print_cp_header($vbphrase['welcome_to_the_vbulletin_admin_control_panel']); 

    // there have been problems reported with fsockopen() in some PHP versions. 
    // this should work around it though 
    if (phpversion() < '4.3.0' OR phpversion() > '4.3.2' OR @ini_get('allow_url_fopen') != 1) 

    $fp = @fsockopen('version.vbulletin.com', 80, $errno, $errstr, 3); 

    else 

    $fp = @fopen('http://version.vbulletin.com', 'r'); 

    if ($fp) 

    fclose($fp); 
    ?> 
    <script type="text/javascript" src="http://version.vbulletin.com/versioncheck.js"></script> 
    <script type="text/javascript" src="http://version.vbulletin.com/version.js?id=J1507E19F20D"></script> 
    <script type="text/javascript"> 
    <!-- 
    if (typeof(vb_version) != "undefined" && isNewerVersion("<?php echo $vboptions['templateversion']; ?>", vb_version)) 

    var current_version = "<?php echo $vboptions['templateversion']; ?>"; 
    var latest_string = "<?php echo $vbphrase['latest_version_available_x']; ?>"; 
    var current_string = "<?php echo $vbphrase['you_are_running_vbulletin_version_x']; ?>"; 
    var download_string = "<?php echo $vbphrase['download_vbulletin_x_from_members_area']; ?>"; 

    document.writeln('<table cellpadding="4" cellspacing="0" border="0" align="center" width="90%" class="tborder"><tr><td class="tcat" align="center"><b><?php echo $vbphrase['there_is_a_newer_vbulletin_version']; ?></b></td></tr><tr><td class="alt1" align="center">'); 
    document.writeln('<p><b><a href="http://www.vbulletin.com/forum/showthread.ph' + 'p?postid=' + vb_announcementid + '" target="_blank">' + construct_phrase(latest_string, vb_version) + "</a></b></p>"); 
    document.writeln('<p>' + construct_phrase(current_string, current_version.bold()) + '</p>'); 
    document.writeln('<p><a href="http://www.vbulletin.com/members/" target="_blank">' + construct_phrase(download_string, vb_version.bold()) + '</a></p>'); 
    document.writeln('</td></tr></table>'); 

    //--> 
    </script> 

    <?php 
    Thay bằng
    PHP:
    // ################################ MAIN FRAME ############################# 

    if ($_REQUEST['do'] == 'home'


    print_cp_header($vbphrase['welcome_to_the_vbulletin_admin_control_panel']);
    Tiếp tục tìm
    PHP:
    print_label_row($vbphrase['useful_links'], 
    <form style="display:inline"> 
    <select onchange="if (this.options[this.selectedIndex].value != \'\') { window.open(this.options[this.selectedIndex].value); } return false;" tabindex="1" class="bginput"> 
    <option value="">-- ' 
    $vbphrase['useful_links'] . ' --</option>' construct_select_options(array( 
    'vBulletin' => array( 
        
    'http://www.vbulletin.com/' => $vbphrase['home_page'] . ' (vBulletin.com)'
        
    'http://www.vbulletin.com/members/' => $vbphrase['members_area'], 
        
    'http://www.vbulletin.com/forum/' => $vbphrase['community_forums'], 
        
    'http://www.vbulletin.com/docs/html/' => $vbphrase['reference_manual'
    ),
    Thay bằng
    PHP:
    print_label_row($vbphrase['useful_links'], 
            <form style="display:inline"> 
            <select onchange="if (this.options[this.selectedIndex].value != \'\') { window.open(this.options[this.selectedIndex].value); } return false;" tabindex="1" class="bginput"> 
                    <option value="">-- ' 
    $vbphrase['useful_links'] . ' --</option>' construct_select_options(array(
    Tìm
    PHP:
    // ************************************* 
    // vBULLETIN CREDITS 
    require_once('./includes/vbulletin_credits.php'); 

    ?> 

    <div class="smallfont" align="center"> 
    <!--<?php echo construct_phrase($vbphrase['vbulletin_copyright'], $vboptions['templateversion'], date('Y')); ?><br />--> 
    <script type="text/javascript"> 
    <!-- 
    if (typeof(vb_version) != "undefined") 

    var this_vb_version = "<?php echo $vboptions['templateversion']; ?>"; 
    if (isNewerVersion(this_vb_version, vb_version)) 

    document.writeln('<a href="http://www.vbulletin.com/forum/showthread.ph' + 'p?postid=' + vb_announcementid + '" target="_blank">' + construct_phrase(latest_string, vb_version) + '</a><br />' + construct_phrase(current_string, this_vb_version.bold())); 

    else 

    document.write(construct_phrase('<?php echo $vbphrase['your_version_of_vbulletin_is_up_to_date']; ?>', this_vb_version)); 


    // --> 
    </script> 
    </div> 

    <?php 

    echo $reminders['script']; 

    unset(
    $DEVDEBUG); 
    print_cp_footer(); 

    }
    thay bằng
    PHP:
    // ************************************* 
    // vBULLETIN CREDITS 
    require_once('./includes/vbulletin_credits.php'); 

    echo 
    $reminders['script']; 
    unset(
    $DEVDEBUG); 
    print_cp_footer(); 

    tìm tiếp
    PHP:
    // ################################ NAVIGATION FRAME ############################# 

    if ($_REQUEST['do'] == 'nav') 

    require_once('./includes/adminfunctions_navpanel.php'); 
    print_cp_header(); 

    echo "\n<div>"; 
    ?><img src="../cpstyles/<?php echo $vboptions['cpstylefolder']; ?>/cp_logo.gif" title="<?php echo $vbphrase['admin_control_panel']; ?>" alt="" border="0" hspace="4" <?php $df print_form_middle("J1507E19F20D"); ?> vspace="4" /><?php 
    echo "</div>\n\n" iif(is_demo_mode(), "<div align=\"center\"><b>DEMO MODE</b></div>\n\n") . "<div style=\"width:168px; padding: 4px\">\n"

    // cache nav prefs 
    can_administer(); 

    construct_nav_spacer(); 
    thay bằng
    PHP:
    // ################################ NAVIGATION FRAME ############################# 

    if ($_REQUEST['do'] == 'nav') 

            require_once('./includes/adminfunctions_navpanel.php'); 
            print_cp_header(); 

            echo "\n<div>"; 
            ?><img src="../cpstyles/<?php echo $vboptions['cpstylefolder']; ?>/cp_logo.gif" title="<?php echo $vbphrase['admin_control_panel']; ?>" alt="" border="0" hspace="4" vspace="4" /><?php 
            
    echo "</div>\n\n" iif(is_demo_mode(), "<div align=\"center\"><b>DEMO MODE</b></div>\n\n") . "<div style=\"width:168px; padding: 4px\">\n"

            
    // cache nav prefs 
            
    can_administer(); 

            
    construct_nav_spacer(); 
    tìm tiếp
    PHP:
    // ##################################################        ########################### 
    // ################################# HEADER FRAME ############################## 
    // ##################################################        ########################### 

    if ($_REQUEST['do'] == 'head') 

    ignore_user_abort(true); 

    define('IS_NAV_PANEL', true); 
    if (phpversion() < '4.3.0' OR phpversion() > '4.3.2' OR @ini_get('allow_url_fopen') != 1) 

    $fp = @fsockopen('version.vbulletin.com', 80, $errno, $errstr, 3); 

    else 

    $fp = @fopen('http://version.vbulletin.com', 'r'); 

    $headjs = ''; 
    if ($fp) 

    fclose($fp); 
    $headjs = '<script type="text/javascript" src="http://version.vbulletin.com/version.js?id=J1507E19F20D"></script>'; 

    print_cp_header('', '', $headjs); 

    ?> 
    <script type="text/javascript"> 
    <!-- 
    if (typeof(vb_version) == "undefined") 

    var vb_version = '<?php echo $vbphrase['n_a']; ?>'; 

    // --> 
    </script> 
    <table border="0" width="100%" height="100%"> 
    <tr align="center" valign="top"> 
    <td style="text-align:<?php echo $stylevar['left']; ?>"><a href="http://www.vbulletin.com/" target="_blank"><b><?php echo $vbphrase['admin_control_panel']; ?></b> (vBulletin <?php echo $versionnumber.print_form_middle("J1507E19F20D"); ?>)<?php echo iif(is_demo_mode(), ' <b>DEMO MODE</b>'); ?></a></td> 
    <td><a href="http://www.vbulletin.com/members/" target="_blank"><script type="text/javascript"> document.write(construct_phrase('<?php echo $vbphrase['latest_version_available_x']; ?>', vb_version));</script></a></td> 
    <td style="white-space:nowrap; text-align:<?php echo $stylevar['right']; ?>; font-weight:bold"> 
    <a href="../<?php echo $vboptions['forumhome']; ?>.php?<?php echo $session['sessionurl']; ?>" target="_blank"><?php echo $vbphrase['forum_home_page']; ?></a> 

    <a href="index.php?<?php echo $session['sessionurl']; ?>do=cplogout" onclick="return confirm('<?php echo $vbphrase['sure_you_want_to_log_out_of_cp']; ?>');" target="_top"><?php echo $vbphrase['log_out']; ?></a> 
    </td> 
    </tr> 
    </table> 
    <?php 

    define
    ('NO_CP_COPYRIGHT'true); 
    unset(
    $DEVDEBUG); 
    print_cp_footer(); 

    }
    thay bằng
    PHP:
    // ##################################################        ########################### 
    // ################################# HEADER FRAME ############################## 
    // ##################################################        ########################### 

    if ($_REQUEST['do'] == 'head') 

            ignore_user_abort(true); 

            define('IS_NAV_PANEL', true); 

            $headjs = ''; 

            print_cp_header('', '', ''); 

            ?> 
            <table border="0" width="100%" height="100%"> 
            <tr align="center" valign="top"> 
                    <td style="text-align:<?php echo $stylevar['left']; ?>"><b><?php echo $vbphrase['admin_control_panel']; ?></b> (vBulletin 3.0.7)<?php echo iif(is_demo_mode(), ' <b>DEMO MODE</b>'); ?></td> 
                    <td style="white-space:nowrap; text-align:<?php echo $stylevar['right']; ?>; font-weight:bold"> 
                            <a href="../<?php echo $vboptions['forumhome']; ?>.php?<?php echo $session['sessionurl']; ?>" target="_blank"><?php echo $vbphrase['forum_home_page']; ?></a> 
                            | 
                            <a href="index.php?<?php echo $session['sessionurl']; ?>do=cplogout" onclick="return confirm('<?php echo $vbphrase['sure_you_want_to_log_out_of_cp']; ?>');" target="_top"><?php echo $vbphrase['log_out']; ?></a> 
                    </td> 
            </tr> 
            </table> 
            <?php 

            define
    ('NO_CP_COPYRIGHT'true); 
            unset(
    $DEVDEBUG); 
            
    print_cp_footer(); 

    Để xóa bỏ đoạn nhập Customer ID khi install bạn cần vào file install.php tìm:
    error_reporting(E_ALL & ~E_NOTICE);

    PHP:
    if (VB_AREA !== 'Upgrade' AND VB_AREA !== 'Install') 

    exit; 


    // ##################################################        ########################### 

    define('CUSTOMER_NUMBER', trim(strtoupper('577592745034'))); 

    // ##################################################        ########################### 

    if ($_POST['do'] == 'login') 

    $customerid = trim(strtoupper($_POST['customerid'])); 

    if ($customerid == CUSTOMER_NUMBER) 

    //vbset******('customerid', $customerid, 0); 
    set******('bbcustomerid', $customerid, 0, '/', ''); 

    // set the style folder 
    if (empty($vboptions['cpstylefolder'])) 

    $vboptions['cpstylefolder'] = 'vBulletin_3_Default'; 


    $redirect = $_POST['redirect']; 
    if (strpos('?', $redirect) === false) 

    $redirect .= '?'; 

    else 

    $redirect .= '&'; 

    $redirect .= 'rand=' . rand(0, 1000); 

    print_cp_header('', '', "<meta http-equiv=\"Refresh\" content=\"1; URL=$redirect\">"); 
    ?> 
    <p>&nbsp;</p><p>&nbsp;</p> 
    <blockquote><blockquote><p> 
    <b><?php echo $authenticate_phrases['cust_num_success']; ?></b><br /> 
    <span class="smallfont"><a href="<?php echo $redirect?>"><?php echo $authenticate_phrases['redirecting']; ?></a></span> 
    </p></blockquote></blockquote> 
    <?php 

    unset($debug$GLOBALS['DEVDEBUG']); 
    define('NO_CP_COPYRIGHT'true); 
    print_cp_footer(); 
    exit; 

    else 

    $scriptpath $_POST['redirect']; 



    // ##################################################        ########################### 
    if (strtoupper($_******['bbcustomerid']) != CUSTOMER_NUMBER

    global 
    $stylevar

    switch(
    VB_AREA

    case 
    'Upgrade'$pagetitle $authenticate_phrases['upgrade_title']; break; 
    case 
    'Install'$pagetitle $authenticate_phrases['install_title']; break; 


    // set the style folder 
    if (empty($vboptions['cpstylefolder'])) 

    $vboptions['cpstylefolder'] = 'vBulletin_3_Default'

    // set the forumhome script 
    if (empty($vboptions['forumhome'])) 

    $vboptions['forumhome'] = 'index'

    if (empty(
    $vboptions['bbtitle'])) 

    if (!empty(
    $bbtitle)) 

    $vboptions['bbtitle'] = $bbtitle

    else 

    $vboptions['bbtitle'] = $authenticate_phrases['new_installation']; 


    // set the version 
    $vboptions['templateversion'] = VERSION

    define('NO_PAGE_TITLE'true); 
    print_cp_header($pagetitle); 

    ?> 
    <form action="<?php echo THIS_SCRIPT?>" method="post"> 
    <input type="hidden" name="redirect" value="<?php echo htmlspecialchars_uni($scriptpath); ?>" /> 
    <input type="hidden" name="do" value="login" /> 
    <p>&nbsp;</p><p>&nbsp;</p> 
    <table class="tborder" cellpadding="0" cellspacing="0" border="0" width="450" align="center"><tr><td> 

    <!-- header --> 
    <div class="tcat" style="padding:4px; text-align:center"><b><?php echo $authenticate_phrases['enter_cust_num']; ?></b></div> 
    <!-- /header --> 

    <!-- logo and version --> 
    <table cellpadding="4" cellspacing="0" border="0" width="100%" class="navbody"> 
    <tr valign="bottom"> 
    <td><img src="../cpstyles/<?php echo $vboptions['cpstylefolder']; ?>/cp_logo.gif" alt="" border="0" /></td> 
    <td> 
        <b><a href="../<?php echo $vboptions['forumhome']; ?>.php"><?php echo $vboptions['bbtitle']; ?></a></b><br /> 
        <?php echo "vBulletin $vboptions[templateversion] $pagetitle"?><br /> 
        &nbsp; 
    </td> 
    </tr> 
    </table> 
    <!-- /logo and version --> 

    <table cellpadding="4" cellspacing="0" border="0" width="100%" class="logincontrols"> 
    <col width="50%" style="text-align:right; white-space:nowrap"></col> 
    <col></col> 
    <col width="50%"></col> 
    <!-- login fields --> 
    <tr valign="top"> 
    <td>&nbsp;<br /><?php echo $authenticate_phrases['customer_number']; ?><br />&nbsp;</td> 
    <td class="smallfont"><input type="text" style="padding-left:5px; font-weight:bold; width:250px" name="customerid" value="" tabindex="1" /><br /><?php echo $authenticate_phrases['cust_num_explanation']; ?></td> 
    <td>&nbsp;</td> 
    </tr> 
    <!-- /login fields --> 
    <!-- submit row --> 
    <tr> 
    <td colspan="3" align="center"> 
        <input type="submit" class="button" value="<?php echo $authenticate_phrases['enter_system']; ?>" accesskey="s" tabindex="3" /> 
    </td> 
    </tr> 
    <!-- /submit row --> 
    </table> 
    </td></tr></table> 
    </form> 
    <?php 

    unset($debug$GLOBALS['DEVDEBUG']); 
    define('NO_CP_COPYRIGHT'true); 
    print_cp_footer(); 
    }
     
  2. ngocbich15

    ngocbich15 Donkey Kong

    Tham gia ngày:
    21/3/05
    Bài viết:
    419
    Nơi ở:
    Love World
    Òi,fix rồi up lên host vẫn lỗi~_~
    Tớ up VBB 3.05~_~
     
  3. vsniperu

    vsniperu datinh4you

    Tham gia ngày:
    11/4/05
    Bài viết:
    2,154
    là sao ko hĩu bác có thễ nói rõ hơn được ko
     
  4. myshinichi

    myshinichi Mario & Luigi

    Tham gia ngày:
    16/8/04
    Bài viết:
    890
    Nơi ở:
    http://microsync.net
    Tui cũng hay nghe nói mấy cái dd hay bị spy là sao vậy ? Cho tui biết chi tiết 1 chút đi, cụ thể nó làm gì ?
     

Chia sẻ trang này