vBulletin Mods

The Official vBulletin Modifications Site
https://www.vbulletin.org/forum/showthread.php?t=127868

orban 02 Oct 2006 22:17

search can be called by anyone with server access on the command line

so he gets access to all your indexes and thus to all your posts

so if you have a designer ssh access to upload stuff he can basically read your private forums

ubuntu-geek 02 Oct 2006 23:27

Quote:

Originally Posted by orban
search can be called by anyone with server access on the command line

so he gets access to all your indexes and thus to all your posts

so if you have a designer ssh access to upload stuff he can basically read your private forums

True.. Not an issue for us..

orban 02 Oct 2006 23:29

Neither here, I'm the only with access.

mute 03 Oct 2006 01:35

Quote:

Originally Posted by mute
Just an FYI, make sure you limit access to that search on your dev boxes if you don't potentially want people searching for info in your private forums :)

I guess now we just get to wait patiently for 0.9.7 to come out...

Oh, I thought at this point the search wasn't excluding forums users don't have permissions to view :)

orban 03 Oct 2006 01:37

They aren't, but all posts/threads are filtered again on the results page.

kmike 03 Oct 2006 13:58

1 Attachment(s)
Attached is the patch for Sphinx 0.9.5 which adds two more group columns.
You'll have to have something like this in your sphinx.conf:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

The part with IF(post.userid=0) is needed because Sphinx doesn't like zero column values (you'll have them if a board has some posts by the guests or deleted users), so we replace them with an arbitrary high number (99999999) which is guaranteed not to happen in the real data.

sphinxapi.php supports two more grouping functions: SetGroup2(array) and SetGroup3(array).
So search.php will have to call $sphinx->SetGroups2($userids) when searching by user(s), where $userids is an array containing their userid's.
And similarly, $sphinx->SetGroups3(array($searchthreadid)) will be called when searching in a thread.

orban 03 Oct 2006 14:20

Thank you. Gonna try this out :)

ubuntu-geek 03 Oct 2006 15:10

Quote:

Originally Posted by orban
Thank you. Gonna try this out :)

Curious to see how this works out.. :)

TECK 03 Oct 2006 16:29

Thanks Orban (and others) for this solution.
0.9.6 is out, it fixes the following issues:
- added support for empty indexes (solves the previous issues we had with indexes)
- added support for multiple sql_query_pre/post/post_index
- fixed timestamp ranges filter in "match any" mode
- fixed configure issues with --without-mysql and --with-pgsql options
- fixed building on Solaris 9

orban 03 Oct 2006 16:32

Yes, but the patch for more than one group won't work for this...

I'm trying to get a snapshot of 0.9.7....

kmike 03 Oct 2006 17:00

Unfortunately, 0.9.7-dev is still too buggy to be used in production.

mute 03 Oct 2006 22:01

Quote:

Originally Posted by kmike
Unfortunately, 0.9.7-dev is still too buggy to be used in production.

What kind of bugs are you running into?

kmike 04 Oct 2006 07:39

Quote:

Originally Posted by orban
The groupid has to be <4096...?! I'm sure you have more than 4096 users...

Where did you get that number? We have much more than 4096 members and everything is working fine.
*edit* Ah, found it. You're mistaken - 4096 is the limit on a number of groupid's listed in one request. A groupid is an unsigned 32bit integer AFAIK, so the limit of 4GB should be enough for everybody (the famous last words)

Quote:

Originally Posted by mute
What kind of bugs are you running into?

Frequent crashes when searching.

TECK 05 Oct 2006 06:02

Go ahead and post it. :)
Thanks Orban.

mute 05 Oct 2006 06:08

Indeed, conf, patch and search would be fantastic :)


All times are GMT. The time now is 02:40.

Powered by vBulletin® Version 3.8.14
Copyright © 2021, MH Sub I, LLC dba vBulletin. All Rights Reserved. vBulletin® is a registered trademark of MH Sub I, LLC
Copyright ©2001 - , vbulletin.org. All rights reserved.