Download security hack?

New Member Joined: Jan 02, 2006 Posts: 12

I like the security script that RavenScripts wher eyou have to type i a code to download a file.
Question. Whats it called?
Where can I get ahold of it?
Apologies if this is in the wrong area!

registered · Site Admin Joined: Jun 04, 2004 Posts: 6437

There are several download module replacements that allow to to require a CAPTCHA code to be entered before downloading. Two that come to mind are Only registered users can see links on this board! Get registered or login! (which requires NSN Groups) and NukeStyles Enhanced Downloads (aka EDL). The NukeStyles site has been down for a while, but you can still find the free 1.7 version and the inexpensive 2.1/2.2 version if you search.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

Also you can try the original from McJerry at http://www.2thextreme.org/modules.php?name=Downloads&d_op=getit&lid=21

Posted: Mon Jan 16, 2006 9:43 am

Thanks, Raven. Is that fairly up-to-date with regards to patches / security?

Posted: Mon Jan 16, 2006 1:27 pm

As usual, 2nd post answered in less than 24 hours! Thanks so much, I got them both when I figure out whcich one I like I will install to my domain!

Thanks everyone!

Posted: Mon Jan 16, 2006 2:38 pm

kguske wrote:

Thanks, Raven. Is that fairly up-to-date with regards to patches / security?

As far as I know. I use it.

Regular Joined: Jun 23, 2005 Posts: 61

I to am looking to add a security code to my downloads section,and while searching the forums for an answer i discovered this post .

I downloaded version from http://www.2thextreme.org/modules.php?name=Downloads&d_op=getit&lid=21

and while looking for the code in the index.php in the downloads module , i was unable to find the following to edit it .
#
#-----[ FIND ]------------------------------------------
#
case "menu":
menu($maindownload);
break;

#
#-----[ ADD AFTER ]------------------------------------------
#

case "gfx":
gfx($random_num);
break;

#
#-----[ EDITING COMPLETE ]------------------------------------------

as per his install instructions

in my index.php when i searched for menu($maindownload);
this is the only section that contained the part that needed to be eddited, by it is not the same.

Code:




function index() {


    global $prefix, $db, $show_links_num, $module_name;


    include("header.php");


    $maindownload = 0;


    menu($maindownload);


    echo "<br>";


    OpenTable();


    echo "<center><font class=\"title\"><b>"._DOWNLOADSMAINCAT."</b></font></center><br>";


    echo "<table border=\"0\" cellspacing=\"10\" cellpadding=\"0\" align=\"center\"><tr>";


    $sql = "SELECT cid, title, cdescription FROM ".$prefix."_downloads_categories WHERE parentid='0' ORDER BY title";


    $result = $db->sql_query($sql);


    $count = 0;


    while ($row = $db->sql_fetchrow($result)) {


   $cid = intval($row['cid']);


   $title = stripslashes(check_html($row['title'], "nohtml"));


   $cdescription = stripslashes($row['cdescription']);


   if ($show_links_num == 1) {


       $cnumrows = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_downloads_downloads WHERE cid='$cid'"));


       $cnumm = "($cnumrows)";


   } else {


       $cnumm = "";


   }


   echo "<td><font class=\"option\"><strong><big>&middot;</big></strong> <a href=\"modules.php?name=$module_name&amp;d_op=viewdownload&amp;cid=$cid\"><b>$title</b></a>$cnumm</font>";


   categorynewdownloadgraphic($cid);


   if ($cdescription) {


       echo "<br><font class=\"content\">$cdescription</font><br>";


   } else {


       echo "<br>";


   }


   $sql2 = "SELECT cid, title FROM ".$prefix."_downloads_categories WHERE parentid='$cid' ORDER BY title LIMIT 0,3";


   $result2 = $db->sql_query($sql2);


   $space = 0;


   while ($row2 = $db->sql_fetchrow($result2)) {


      $cid = intval($row2['cid']);


      $stitle = stripslashes(check_html($row2['title'], "nohtml"));


          if ($space>0) {


         echo ",&nbsp;";


       }


        if ($show_links_num == 1) {


           $cnumrows2 = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_downloads_downloads WHERE cid='$cid'"));


         $cnum = " ($cnumrows2)";


       } else {


         $cnumrows2 = "";


       }


       echo "<font class=\"content\"><a href=\"modules.php?name=$module_name&amp;d_op=viewdownload&amp;cid=$cid\">$stitle</a>$cnum</font>";


       $space++;


   }


   if ($count<1) {


       echo "</td><td>&nbsp;&nbsp;&nbsp;&nbsp;</td>";


       $dum = 1;


   }


   $count++;


   if ($count==2) {


       echo "</td></tr><tr>";


       $count = 0;


       $dum = 0;


   }


    }


    if ($dum == 1) {


   echo "</tr></table>";


    } elseif ($dum == 0) {


   echo "<td></td></tr></table>";


    }


    $numrows = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_downloads_downloads"));


    $catnum = $db->sql_numrows($db->sql_query("SELECT * FROM ".$prefix."_downloads_categories"));


    echo "<center><font class=\"content\">"._THEREARE." <b>$numrows</b> "._DOWNLOADS." "._AND." <b>$catnum</b> "._CATEGORIES." "._INDB."</font></center>";


    CloseTable();


    include("footer.php");


}

where in that part of code do i need to add

case "gfx":
gfx($random_num);
break;

I am using nuke 7.6 patched 3b
Thanks

Posted: Fri Mar 03, 2006 8:56 am

Maybe this helps: http://www.ravenphpscripts.com/postx7702-0-0.html

Posted: Fri Mar 03, 2006 6:26 pm

Susann wrote:

Maybe this helps: http://www.ravenphpscripts.com/postx7702-0-0.html

Thanks Susann got it going Very Happy

Posted: Tue Aug 22, 2006 12:03 pm

Raven wrote:

Also you can try the original from McJerry at http://www.2thextreme.org/modules.php?name=Downloads&d_op=getit&lid=21

I guess they don't like hotlinking. This is what you get in that download raven

Quote:

Hi.

I suppose you want to know what the hell is going on.

Here's the scoop. The site you downloaded this file from
is not authorized to link to the file you requested. You
can download the intended file from our real site at
http://www.2thextreme.org/modules.php?name=Downloads

The best part of our downloads, you dont need to register
to download them, and you are getting the files from the
original source so you can be assured the files are
legitimate and current.

Sorry for the inconvenience, but I dont believe I should
pay for traffic that I do not see when people hotlink our
files from their server.

Feel free to drop by our site and enjoy yourself.

Cheers,
MGCJerry
http://www.2thextreme.org

also, make sure you use the updated version from their site that I updated with chatserv's manual security fixes.

http://www.ravenphpscripts.com/postp79254.html#79254