AJAX registration fileld verificaiton MOD

bluescorpion

New Member
An exploit has been reported on this MOD and it has been withdrawn/quarantined from the vbulletin.org site.They are advising that if anyone has it installed to disable or uninstall it until the author fixes the problem.
Given that the author was not supporting the MOD before the discovery, I think its unlikely that it will be fixed anytime some.

They gave no details about the exploit in the announcement but you are well advised not to ignore it.

regards,
bluescorpion
 
I downloaded it.
Was going to install son..
Thanks..

Will tell my friend to remove it soon.
Can you tell me what problem it makes?
 
The notice only mention a vulnerability which usually means someone figured out how to hack into it... They pulled the mod so I am guessing someone's site got hacked.

fyi...
 
Im using this one with no problems....

Registration form AJAX enhancements
Mod Information
Add A CommentEdit SettingsMark as Uninstalled
Nominate for MOTMJump To CommentsThe Developer
About Developer Visit Web Site

Version: 1.1.1, by FractalizeR (Coder)
Developer Last Online: Jun 2008

--------------------------------------------------------------------------------
Version: 3.7.0 Rating: (18 votes - 4.56 average)
Released: 09 Jun 2008 Last Update: Yesterday Installs: 132
Supported Uses Plugins Additional Files Re-usable Code Translations


What does it do?
Checks for username validity as you type it in registration form
Checks for email validity as you type it in registration form
Checks for password validity as you type it in registration form
Suggests good passwords
Shows strength of your password as you type it in registration form
Points of interest:

No template or code changes. All is done using VBulletin Product API.
Only several custom phrase is used. All others are taken from VBulletin. So, product localization is VERY easy.
All validity checks are implemented using VBulletin API

How to install?
Unpack archive into forum root
Install *.xml file via Admin Control Panel (Product management)

What is NOT done:
No checks implemented for entering captchas as it may seriously lower forum anti-spam security


How to update to latest version?
Overwrite all files by new ones from latest zip and reimport product XML file via Admin Control Panel with "Allow Overwrite" option checked.

Version history:

Code:
1.1.1 (11-06-08)Template issue fixed (password suggestor is now correctly shown) (skariko)

1.1 (11-06-08)New feature - password suggestor. New phrases were added for it also to product XML.
New images for password strength added to distro for easy customization.
Functionality of password strength calculation fixed (Quantnet.org, Arbit3r)
non-latin characters problem hopefully fixed (requires iconv PHP extension, autodetected). (ecihanuysal)
Border in IE is now correctly cleared (Jeordie015)
1.0.1 (10-06-08)Text sanitizing added (AlexanderT).
Password strength images are now shown everywhere (HTML was broken) (TheInsaneManiac, uantnet.org, Lionel)
jQuery is now about 45% less in size (Milad)
 
filez said:
Im using this one with no problems....

Registration form AJAX enhancements
Mod Information
Add A CommentEdit SettingsMark as Uninstalled
Nominate for MOTMJump To CommentsThe Developer
About Developer Visit Web Site

Version: 1.1.1, by FractalizeR (Coder)
Developer Last Online: Jun 2008

thanks this mod is secure one and another one is insecure....


anyway can any1 upload this mod by Fractalizer latest version 1.1.4
 
Back
Top