[問題]大家好，问个问题

[solano]

是这样，最近老是发现有人没有注册就是用搜索论坛和查看会员资料这两项功能，我随后就用mod把这两项功能屏蔽掉了，没有注册的用户无法使用。而且我的论坛已经从2.08升级到2.10 上来，可是我还是发现有人没有注册就使用这两项功能，每次我用admin帐户登陆就会发现有人在做这两件事情，而且论坛显示时游客。请问这个是怎么弄得？难道说2.10 还是有漏洞马?
谢谢了

[webspirit]

你是用什么 MOD 屏蔽的？
请补上发问格式
http://phpbb-tw.net/phpbb/viewtopic.php?t=15329

[solano]

好的，谢谢楼上的

我用的是linux redhat 9 做主机\r
apache2+mysql+php

机器和宽带都是我们自己的，所以不开ftp直接用终端登陆主机,上传文件什么都使用终端

宽带用的是dsl

使用竹猫里面的一个mod

代碼: 選擇全部

程式碼:   if ( $mode == 'viewprofile' ) 
   { 



換成 

程式碼:      if ( !$userdata['session_logged_in'] && $mode == 'viewprofile' ) 
      { 
         redirect(append_sid("login.$phpEx?redirect=profile.$phpEx&mode=viewprofile", true)); 
      } 

[webspirit]

你应该用 Login Required 这个 MOD

代碼: 選擇全部

########################################################### 
## MOD Title: Login Required 
## MOD Author: Bummer - Bill Beardslee - webmaster@webxtractions.com
## MOD Authors Site: http://forums.webxtractions.com
##                   http://www.webxtractions.com
##
## MOD Description: This mod will make it so that visitors 
##                  must login before viewing your board. 
## 
## MOD Version: 1.0.2 
## 
## Installation Level: (easy) 
## Installation Time: 5 Minutes 
## 
## Files To Edit: 
## 
##          login.php 
##          viewonline.php
##          templates/subSilver/login_body.tpl 
##          language/lang_english/lang_main.php 
##          index.php (Optional)
##          search.php
##	groupcp.php (Optional)
##	memberlist.php (Optional)
##          viewforum.php (Optional) 
##          viewtopic.php (Optional) 
##          includes/usercp_viewprofile.php (Optional) 
##          
## Included Files: (n/a) 
########################################################### 
## Author Notes: This is Beta Software. Use at your own risk. 
## 
## You should also set all of your forums to REG at a minimum.
## 
## This mod has been updated to include (Optional) privacy for 
## pages other than the index page. Please read "Update History".
## 
###########################################################
## Update History:
##
## Version 1.0.2
##
##  Added (Optional) fields for usercp_viewprofile.php and 
##  added a "!" after the word "free" in lang_main.php.
##
## Version 1.0.1
##
##  Added (Optional) fields for viewforum.php and viewtopic.php
##
## Version 1.0.0
##
##  Added (Optional) fields for groupcp.php and memberlist.php
##
## Version 0.9.0
##
##  Original hack to block visitors from viewing your main
##  board unless they have logged in first.
##
########################################################### 
## Before Adding This MOD To Your Forum, you should 
## Back Up All Files Related To This HACK 
########################################################### 

# 
#-----[ OPEN ]------------------------------------------ 
# 

login.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

         'L_SEND_PASSWORD' => $lang['Forgotten_password'], 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

         'L_NEW_REGISTER' => sprintf($lang['New_register'], '<a href="' . append_sid("profile.$phpEx?mode=register") . '">', '</a>'), // Login Required hack 

# 
#-----[ OPEN ]------------------------------------------ 
# 

templates/subSilver/login_body.tpl 

# 
#-----[ FIND ]------------------------------------------ 
# 

        <tr align="center"> 
         <td colspan="2"><span class="gensmall"><a href="{U_SEND_PASSWORD}" class="gensmall">{L_SEND_PASSWORD}</a></span></td> 
        </tr> 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

      <!-- Login Required hack -->
        <tr align="center">
         <td colspan="2"><span class="gensmall">{L_NEW_REGISTER}</span></td>
        </tr>

# 
#-----[ OPEN ]------------------------------------------ 
# 

language/lang_english/lang_main.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// That's all Folks! 

# 
#-----[ BEFORE ADD ]------------------------------------ 
# 

$lang['New_register'] = 'You don\'t have an account yet?<br />You can %sregister%s here for free!'; // Login Required hack 

# 
#-----[ OPEN ]------------------------------------------ 
# 

index.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// End session management 
// 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=index.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

######################################################## 
## 
## If you want added privacy, install the following. (Optional) 
## 
######################################################## 

# 
#-----[ OPEN ]------------------------------------------ 
# 

groupcp.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// End session management 
// 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=groupcp.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

# 
#-----[ OPEN ]------------------------------------------ 
# 

memberlist.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// End session management 
// 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=memberlist.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

# 
#-----[ OPEN ]------------------------------------------ 
# 

viewforum.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// End session management 
// 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=viewforum.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

# 
#-----[ OPEN ]------------------------------------------ 
# 

viewtopic.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// End session management 
// 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=viewtopic.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

# 
#-----[ OPEN ]------------------------------------------ 
# 

search.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

// 
// End session management 
// 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=search.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

# 
#-----[ OPEN ]------------------------------------------ 
# 

includes/usercp_viewprofile.php 

# 
#-----[ FIND ]------------------------------------------ 
# 

if ( !defined('IN_PHPBB') ) 
{ 
   die("Hacking attempt"); 
   exit; 
} 

# 
#-----[ AFTER ADD ]------------------------------------- 
# 

// 
// Start Login Required hack 
// 
if( !$userdata['session_logged_in'] ) { 
header("Location: " . append_sid("login.$phpEx?redirect=profile.$phpEx", true)); 
} 
// 
// End Login Required hack 
// 

# 
#-----[ SAVE AND CLOSE ALL FILES ]---------------------- 
#

[solano]

让我找点找到这个mod就好了

谢谢你啦