Login Register


Tutorial How to stop the MyBB avatar IP method. filter_list
Author
Message
How to stop the MyBB avatar IP method. #1
First you want to go to inc/functions.php, at line 5584 (May be different if you use google SEO), you will look for a function called "fetch_remote_file". This function allows for a douchebag to get the real IP address of the forum.
In order to stop this, we will use this code.

This is within the section that says if(function_exists("curl_init")) for those of you who have edited their functions.php file, Insert the following at or near the beginning of this block.

PHP Code:
curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1"); curl_setopt($ch, CURLOPT_PROXYPORT, "8080"); curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);

Replace the IP address and port with the corresponding ones of your proxy. If it's an HTTP proxy, replace CURLPROXY_SOCKS5 with CURLPROXY_HTTP.

Reply

RE: How to stop the MyBB avatar IP method. #2
Nice one, thanks for the share.
I used to own mybb forum.

Reply

RE: How to stop the MyBB avatar IP method. #3
This will come to great use for people who are starting a forum.
[Image: tenor.gif]

🍫  πŸ¬Β πŸŽ€

Reply

RE: How to stop the MyBB avatar IP method. #4
Thanks for sharing, definitely going to come in handy.

Reply

RE: How to stop the MyBB avatar IP method. #5
What if you don't use a proxy? Is there a tutorial on how to set-up that? Away to search the forum.
Thanks, Kirito.

Reply

RE: How to stop the MyBB avatar IP method. #6
(06-13-2013, 08:01 PM)Kirito Wrote: First you want to go to inc/functions.php, at line 5584 (May be different if you use google SEO), you will look for a function called "fetch_remote_file". This function allows for an douchebag to get the real IP address of the forum.

(06-13-2013, 08:01 PM)Kirito Wrote: This function allows for an douchebag to get the real IP address of the forum.

(06-13-2013, 08:01 PM)Kirito Wrote: an douchebag

Kirito, you amuse me.
[Image: F4Z9Dqw.png]

Reply

RE: How to stop the MyBB avatar IP method. #7
>If that was the only way to get the Backend,
>Any userinput that has to be checked can be exploited for the backend.

Reply

RE: How to stop the MyBB avatar IP method. #8
(07-01-2013, 12:09 AM)Vypor Wrote: >If that was the only way to get the Backend,
>Any userinput that has to be checked can be exploited for the backend.

Yeah, but avatar is probably the most commonly used means.


(08-14-2013, 05:05 PM)Flex Wrote: I have a question

curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1");
curl_setopt($ch, CURLOPT_PROXYPORT, "8080");
curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);


do we just go get a random proxy? O_o

or is this something we need on our own server.

Kirito didn't come up with this. Nohbdy did. Kirito just reposted it.
[Image: 7ajmN5P.jpg]

Telegram: Oni_SL (Link)

Reply

RE: How to stop the MyBB avatar IP method. #9
(08-14-2013, 05:05 PM)Flex Wrote: I have a question

curl_setopt($ch, CURLOPT_PROXY, "127.0.0.1");
curl_setopt($ch, CURLOPT_PROXYPORT, "8080");
curl_setopt($ch, CURLOPT_PROXYTYPE, CURLPROXY_SOCKS5);


do we just go get a random proxy? O_o

or is this something we need on our own server.

I did not write this tutorial, but obviously a paid premium proxy that will actually last is your best option.

Reply







Users browsing this thread: 1 Guest(s)