+- Sinisterly (https://sinister.ly)
+-- Forum: Coding (https://sinister.ly/Forum-Coding)
+--- Forum: PHP (https://sinister.ly/Forum-PHP)
+--- Thread: Tutorial How to stop the MyBB avatar IP method. (/Thread-Tutorial-How-to-stop-the-MyBB-avatar-IP-method)
How to stop the MyBB avatar IP method. - Nefarious - 06-13-2013
First you want to go to inc/functions.php, at line 5584 (May be different if you use google SEO), you will look for a function called "fetch_remote_file". This function allows for a douchebag to get the real IP address of the forum.
In order to stop this, we will use this code.
This is within the section that says if(function_exists("curl_init")) for those of you who have edited their functions.php file, Insert the following at or near the beginning of this block.
PHP Code:
curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1");
curl_setopt($ch, CURLOPT_PROXYPORT, "8080");
curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
Replace the IP address and port with the corresponding ones of your proxy. If it's an HTTP proxy, replace CURLPROXY_SOCKS5 with CURLPROXY_HTTP.
RE: How to stop the MyBB avatar IP method. - Sirius - 06-13-2013
Nice one, thanks for the share.
I used to own mybb forum.
RE: How to stop the MyBB avatar IP method. - Customer - 06-13-2013
This will come to great use for people who are starting a forum.
RE: How to stop the MyBB avatar IP method. - Wonders - 06-30-2013
Thanks for sharing, definitely going to come in handy.
RE: How to stop the MyBB avatar IP method. - Banadmin - 06-30-2013
What if you don't use a proxy? Is there a tutorial on how to set-up that? Away to search the forum.
Thanks, Kirito.
RE: How to stop the MyBB avatar IP method. - BreShiE - 06-30-2013
(06-13-2013, 08:01 PM)Kirito Wrote: First you want to go to inc/functions.php, at line 5584 (May be different if you use google SEO), you will look for a function called "fetch_remote_file". This function allows for an douchebag to get the real IP address of the forum.
(06-13-2013, 08:01 PM)Kirito Wrote: This function allows for an douchebag to get the real IP address of the forum.
(06-13-2013, 08:01 PM)Kirito Wrote: an douchebag
Kirito, you amuse me.
RE: How to stop the MyBB avatar IP method. - Vypor - 07-01-2013
>If that was the only way to get the Backend,
>Any userinput that has to be checked can be exploited for the backend.
RE: How to stop the MyBB avatar IP method. - Oni - 08-14-2013
(07-01-2013, 12:09 AM)Vypor Wrote: >If that was the only way to get the Backend,
>Any userinput that has to be checked can be exploited for the backend.
Yeah, but avatar is probably the most commonly used means.
(08-14-2013, 05:05 PM)Flex Wrote: I have a question
curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1");
curl_setopt($ch, CURLOPT_PROXYPORT, "8080");
curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
do we just go get a random proxy? O_o
or is this something we need on our own server.
Kirito didn't come up with this. Nohbdy did. Kirito just reposted it.
RE: How to stop the MyBB avatar IP method. - Nefarious - 08-14-2013
(08-14-2013, 05:05 PM)Flex Wrote: I have a question
curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1");
curl_setopt($ch, CURLOPT_PROXYPORT, "8080");
curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);
do we just go get a random proxy? O_o
or is this something we need on our own server.
I did not write this tutorial, but obviously a paid premium proxy that will actually last is your best option.