UberCMS PIN System [v2.3 - Edit of Jonty's PIN System]

Hey there guys, I've edited this thread, and I've cleaned it up, like I promised =)

First of all, you're going to want to download the PIN System script, by going to the following link:
PIN System - Liam (From RaGEZONE).rar

Once you have done that, you're going to want to extract that into the main main directory of your hotel, (XAMPP / WWWROOT) - Then you're going to want to run this SQL Query:

Quote:

---

CREATE TABLE IF NOT EXISTS `unlock_pins` (
`userid` int(11) NOT NULL,
`unlock_code` varchar(20) NOT NULL
) ENGINE=InnoDB DEFAULT CHARSET=latin1;

ALTER TABLE `users`
ADD COLUMN `staff_pin` int(4) NOT NULL DEFAULT '1234';

---

Once you have done that, you can then give your staff their very own PINs!

But, if you want the PIN system to actually be enforced, you're going to want to open up your `client.php` or `newclient.php` file and paste this anywhere under, as long as it's under the global require!

PHP Code:

---

// No PIN - LOCKED!
if($users->GetUserVar(USER_ID, 'rank') > 4 && !isset($_SESSION["staff_PassAuth"])) {
    header ("Location: " . WWW . "/denied.php");
} 


if($users->GetUserVar(USER_ID, 'failed_pins') > 4) {
    header ("Location: " . WWW . "/locked_out.php");
    } 


---

And if you want the best security for your staff, add this to your housekeeping index:

PHP Code:

---

if($users->GetUserVar(USER_ID, 'failed_pins') > 4) {    header ("Location: " . WWW . "/locked_out.php");
    } 


---

Images:
http://img600.imageshack.us/img600/5...rification.png
http://img838.imageshack.us/img838/1...aersvsedtb.png


I thank you for taking the time to read this, and using my script, if you are! I hope you enjoyed my release. Credits go to Jonty, for releasing the original script.. And to me, for completing it and making it more advanced!

If I helped you, or you liked this release, feel free to like the thread, or REP me! Cheers, Liam. Enjoy =D

Well that's a long PHP code :P

Quote:

---

Originally Posted by Prizm

Well that's a long PHP code :P
Thanks, can you make it for RevCMS too? ^.^

---

No problem ;) I will upload it as a download when I wake up (once I go to sleep, that is..)

And, next time, please read the thread. I'm NOT converting this into another thread... Sorry :P But it's not that hard to convert it =)
Cheers,
Liam!

Quote:

---

Originally Posted by Liam

No problem ;) I will upload it as a download when I wake up (once I go to sleep, that is..)

And, next time, please read the thread. I'm NOT converting this into another thread... Sorry :P But it's not that hard to convert it =)
Cheers,
Liam!

---

haha I forgot to read the text under the quote =P
I know RevCMS in and out, so it wouldn't be that hard ;)

Next time put that code in a

Spoiler:

PHP Code:

---

Spoiler 


---

Quote:

---

Originally Posted by SeaTroll

Next time put that code in a

Spoiler:

PHP Code:

---

Spoiler 


---

---

What if I didn't want to though?

Quote:

---

Originally Posted by Liam

What if I didn't want to though?

---

Then at least use PHP tags, not quotes. :P:

Quote:

---

Originally Posted by n0minal

Then at least use PHP tags, not quotes. :P:

---

Eh, give me a break dude it's 7 AM o__o No sleep <3 No hatin ? Nah I'll clean up the thread sooner or later =)

Dude, please if you have more than 10 CSS rules in a file make a .css file and link the file with HTML >< The code is a lot messy with all of those CSS class. :lol:

Quote:

---

Originally Posted by Emetophobic

Dude, please if you have more than 10 CSS rules in a file make a .css file and link the file with HTML >< The code is a lot messy with all of those CSS class. :lol:

---

Indeed, it looks very messy with all this CSS on the pages.

The pin system was never needed. I mean if the user was stupid enough to give out the password, tough. It just creates unneeded cookies and queries.

Quote:

---

Originally Posted by Zak©

The pin system was never needed. I mean if the user was stupid enough to give out the password, tough. It just creates unneeded cookies and queries.

---

So you rather less security just because it's one TINY cookie on your computer? Hrmmmm.. That's nice =) Enjoy the release fellows!

Quote:

---

Originally Posted by Liam

So you rather less security just because it's one TINY cookie on your computer? Hrmmmm.. That's nice =) Enjoy the release fellows!

---

The pin system is cool and somewhat creative but..... it does get to be a little annoying after a while.

Quote:

---

Originally Posted by leenster

The pin system is cool and somewhat creative but..... it does get to be a little annoying after a while.

---

I've gotten use to it, that's me personally. But your hotel, your rules.. If you want it, you use it, if you don't, don't use it.

Quote:

---

Originally Posted by Liam

So you rather less security just because it's one TINY cookie on your computer? Hrmmmm.. That's nice =) Enjoy the release fellows!

---

If you're smart enough to use a decent CMS then you should be more then fine since every "hacker" in the Habbo community is a skid who can only DOS.

It's not a bank account we don't need several security verifications. But i guess that's just your view.

Quote:

---

Originally Posted by Zak©

If you're smart enough to use a decent CMS then you should be more then fine since every "hacker" in the Habbo community is a skid who can only DOS.

It's not a bank account we don't need several security verifications. But i guess that's just your view.

---

I understand what you mean, but if you rather not have that one small extra layer of security to protect you, then that's your decision, not mine. Because every bit of security helps, you may think not.. Not everything is secure as it seems, not everyone has secure passwords, not everyone remembers to logout when they've logged in to public places/other peoples computers... You know ;/

PINS..
Its a f*cking hotel.. not a bank!

yo,

what is the code for uberCMS to get user_id? you know, it is {id} for revCMS.

Good edit. You should make it so the user has the option to toggle extra security (PIN) on or off and set their own pin in the user profile page.

Tbh I dont find a PIN system necessary, password should be enough.
But as Jonteh suggested you should make it optional.

Quote:

---

Originally Posted by Jonteh

You're fucking retarded go die.

Good edit. You should make it so the user has the option to toggle extra security (PIN) on or off and set their own pin in the user profile page.

---

Cheers mate, I don't really feel as if I could do that, simply because in no way possible can I find a working Profile/Account settings page for UberCMS.. That has password changing, etc... But thanks for the reply ;D!

As to Divide.. No need to swear, and PIN's aren't only for a bank account? They're used as a security measure to prevent any data being compromised... Cheers, Liam o/

Quote:

---

Originally Posted by Liam

Cheers mate, I don't really feel as if I could do that, simply because in no way possible can I find a working Profile/Account settings page for UberCMS.. That has password changing, etc... But thanks for the reply ;D!

As to Divide.. No need to swear, and PIN's aren't only for a bank account? They're used as a security measure to prevent any data being compromised... Cheers, Liam o/

---

Take the page from Uber2, it works.

I think it's great to have a little more security on your hotel, everyone counts!

Thanks for releasing.

Quote:

---

Originally Posted by Weytin

I think it's great to have a little more security on your hotel, everyone counts!

Thanks for releasing.

---

I think it's useful. There's been a couple cases where even my own account has been breached on Zap and the PIN has flagged the account and stopped them from progressing into my HK or client. If it wasn't for that, Zap would have probably been severely damaged.

Quote:

---

Originally Posted by Jonteh

I think it's useful. There's been a couple cases where even my own account has been breached on Zap and the PIN has flagged the account and stopped them from progressing into my HK or client. If it wasn't for that, Zap would have probably been severely damaged.

---

Yeah, that wouldn't have been good! Things like this prevent accounts being hacked, infact, one of my staff members had their account breached and thanks to this it also locked the account from further access (HK/Client) - But I will also look at UberCMS 2 account settings, for some very odd reason it seemed as if it didn't work last time I tried it.. But maybe 3rd time lucky? Eh..

Anywho, I'll PM you now, just have some questions I thought I'd ask ;D

Quote:

---

Originally Posted by djboetz

yo,

what is the code for uberCMS to get user_id? you know, it is {id} for revCMS.

---

USER_ID

Envoyé depuis mon Samsung Galaxy Note II GT-N7100 avec Tapatalk

Quote:

---

Originally Posted by djboetz

yo,

what is the code for uberCMS to get user_id? you know, it is {id} for revCMS.

---

global.php has all these definitions.

Or.. it should only be visible when an user logging in on another ip address.

Quote:

---

Originally Posted by joopie

Or.. it should only be visible when an user logging in on another ip address.

---

What about people like me who have their IP changed all the time, or a stupid little brother who is just a fag and wants to ruin everything like me :3 But you have a good point their!