security?

sde · #1 02-16-2006, 12:55 PM

did i miss something here? can anyone go to /forums/vbseo_sitemap/ and view my stats or run sitemaps (if that is enabled)?

i logged out of my forums and i could still access the directory. i tried installing a .htaccess password, but then google/yahoo can't read the sitemap files.

please tell me i'm missing something, .. otherwise the data directory should really be seperated from the rest of the files.

if nothing is in place, i would suggest including the global vbulletin script ( if you don't already ) and checking to make sure that the logged in user is an admin. otherwise, don't display the data.

Keith Cohen · #2 02-16-2006, 01:07 PM

Set up a password in your AdminCP options for the Sitemap. It's labeled vBSEO Sitemap Interface Access Password.

sde · #3 02-16-2006, 01:23 PM

that section in my cp is labelled "Direct Script Run Code"

i didn't read the description of that field.

thanks.

Keith Cohen · #4 02-16-2006, 01:24 PM

Yeah, 1.7 has renamed it to make it a bit more clear.

eJM · #5 07-18-2006, 04:27 AM

Sorry to bring up an old thread, but I had an issue concerning "Direct Script Run Code", as that is what it is referred to in the readme.htm for version 1.7. I could NOT figure out what that meant until I did a search. Could someone fix that so that no one else has that problem? If you update the terms and phrases of a program, you should update the readme to reflect those changes.

Thank you.

Keith Cohen · #6 07-18-2006, 10:50 AM

Since 1.7 is still in pre-release, the documentation has not been updated. Previous to 1.7, the field in AdminCP was called "Direct Script Run Code".

eJM · #7 07-18-2006, 02:23 PM

Thanks, Keith. I had no idea that 1.7 was pre-release software. Shouldn't it say so somewhere? I also hope they include information about the files included in the add-ons directory. I put them in the list in the configuration section of my board's admin panel and got several unexplained errors when I ran the script.

For what it's worth, the 1.6.1 readme is seriously lacking in all of those areas too. In fact, there is more information available on the vB.org site, which is not where I expected I would have to go for documentation of a package I got from this site.

PS: Where is that survey? Not where your signature leads to.

Juan Muriente · #8 07-18-2006, 08:17 PM

Quote:

Thanks, Keith. I had no idea that 1.7 was pre-release software. Shouldn't it say so somewhere?

Yes, this documentation will be updated with the formal release. Thank-you for pointing it out.

Quote:

For what it's worth, the 1.6.1 readme is seriously lacking in all of those areas too. In fact, there is more information available on the vBulletin.org site, which is not where I expected I would have to go for documentation of a package I got from this site.

This documentation will be updated accordingly with the next release.

Quote:

PS: Where is that survey? Not where your signature leads to.

It's fixed now, feel free to leave us some feedback

eJM · #9 07-18-2006, 11:44 PM

Quote:

Originally Posted by Juan Muriente

It's fixed now, feel free to leave us some feedback

I did. Oh boy did I.

Please excuse this old fart. I get my air through a tube and the heat here has really beat me down. Sorry to be so curt my last few messages. My best friend just gave me an air conditioner for my birthday today (it ain't my birthday, but at this point I will celebrate any good day) and just finished putting it in. Can't describe how good that makes me feel. So I'll leave you alone for a few more days.