Integration with vBulletin Forum Software

[agiacosa]

I ended up paying a coder to build the necessary bridge to vBulletin software using the PHP SOAP extension. Now, when someone registers through my pligg, they are automatically registered in vBulletin. I've avoided the double registration issue. Also, change of passwords are also synchronized.

If anyone is interested, I'll attach the changed files here this weekend. You must have PHP 5+, the vBSOAP plugin and the PHP SOAP extension running on your server.

[hevnsnt]

Originally Posted by agiacosa

I ended up paying a coder to build the necessary bridge to vBulletin software using the PHP SOAP extension. Now, when someone registers through my pligg, they are automatically registered in vBulletin. I've avoided the double registration issue. Also, change of passwords are also synchronized.

If anyone is interested, I'll attach the changed files here this weekend. You must have PHP 5+, the vBSOAP plugin and the PHP SOAP extension running on your server.

Yes Please do! (I would be willing to donate a little to help cut your cost as well)

[Nicholas]

I'll second that!

[agiacosa]

Folks,

I've attached the necessary files. Please look through the files for the hardcoded URLs. Search for YOURDOMAIN and YOURFORUMDIRECTORY and you should find them. Obviously, change them to your settings.

Please note that I am NOT a coder. I will help to the extent I can. I paid someone to write this up for me and am sharing it with the rest here in the spirit of Open Software. So, I ask for others that may know more about PHP to help those that need help installing this.

Thanks and good luck.

[hevnsnt]

Also would be nice if someone could make it PHP4 compatible..

Agiacosa, Thanks for releasing that, you are helping make the pligg community stronger!

[savant]

wow soap never used that before (only shower gel just kiddin)

something new to check out.

looking at add_pligguser, someone could create bogus users on your forum.
because the soap server can take input from anywhere, someone could loop and create millions of bogus users.
I don't know anything about soap so this might not be true.

if there was like a secret key you could have on the register.php and add_pligguser.php

so if someone tries to make bogus users, it will check the key which it doesn't have.
and the key is hardcorded into the register.php file.

doesn't vbulletin have salt. what does it do in this case??

[agiacosa]

I'm no coder but I think it is set up to use the pligg registration rather than the vBulletin registration. I think pligg doesn't let you register more than one user from the same IP within a certain time as a flood control. Wouldn't that prevent the use of a loop?

[savant]

if you're regstering through pligg, the pligg code would stop it.

you --->pligg --->soap--->vb

if you remove the pligg, then theres no stopping it.
if you know the filename which adds users (add_pligg_user) then someone can make a php file to add it (i think, have to try it out first)

one way to stop this is simply changing the filename
like pigg_use_add or soemthing more cryptic
and change register.php to that filename. so the attacker would need to keep guessing it.

thanx for the code. see ya

[Nicholas]

Kudos for posting the code. Your selflessness is right up there with the fine folks devoting time and resources to make Pligg better. Thank you.

[The Humanaught]

Now we just need a similar script to connect Pligg with phpBB. Any one know about development on this?