Author Topic: Hide SMF Version  (Read 20944 times)

Offline 青山 素子

  • SMF Super Hero
  • *******
  • Posts: 13,709
  • Just call me Motoko
    • Motoko's Pagoda
Hide SMF Version
« on: January 01, 2008, 01:09:09 AM »
Link to Mod

About
-----
This modification provides a way to toggle display of the SMF version you are
running. It has been tested to support 1.1.0 and newer.

This mod and other information can be found at:
http://www.animeneko.net/projects/smf/


Features
--------
 - Hide the version of SMF you are using from non-Administrators


How to Use
----------
You can find the setting by going to:
Admin -> Features and Options -> Basic Features


License
-------
This code is licensed under the terms of the Simple Machines License. SMF code
used in this mod is copyright Simple Machines LLC. All original code is
copyright Michael Johnson.


Rant
----
Not normal for my README, but this one deserves it.

This mod is in response to the many people asking for a way to hide the version
of SMF they are running. Many are mistaken in that it will help them avoid
attacks. This is incorrect. Most "hackers" nowadays are nothing more than
bored script kiddies that run packs to try anything and everything and see what
sticks. It doesn't matter if you aren't running on Windows, or you don't have
Joomla!, Drupal, or phpBB installed as the scripts will try attacks for those
things anyway.

Regardless, people constantly complain about the need to hide the version from
public view. This mod was created so they can do this safely while still being
able to see important updates in the admin area.


Acknowledgements
----------------
"SMF" and "Simple Machines" are trademarks of Simple Machines LLC.

Offline Joomlamz

  • SMF Hero
  • ******
  • Posts: 2,166
  • Gender: Male
  • Suporte Joomla.co.mz
    • Webdesign
Re: Hide SMF Version
« Reply #1 on: January 01, 2008, 03:32:01 AM »
Nice Mod
She work 100%
Thank you
Happy New year 2008

Hosting Free for SMF - PACOTE 500MB

Alguma duvida pode me mandar MP que tera Suporte

Offline karlbenson

  • SMF Friend
  • SMF Super Hero
  • *
  • Posts: 15,501
  • Gender: Male
    • SimpleMachines.org
Re: Hide SMF Version
« Reply #2 on: January 01, 2008, 10:48:41 AM »
I agree with the rant.

Security through obscurity does NOT work.

It is no substitute for keeping your smf forum, and any mods/themes you have installed updated.

Offline Hoochie Coochie Man

  • SMF Hero
  • ******
  • Posts: 5,068
  • Gender: Male
    • İstanblues.org
Re: Hide SMF Version
« Reply #3 on: January 01, 2008, 11:14:24 AM »
Thank you very much, it vorks perfect!
Here is Turkish language:

Code: [Select]
//Hide SMF Version - by Hoochie Coochie Man
$txt['hideVersion'] = 'SMF versiyonunu sakla.';


Destek için özel mesaj atma! Foruma yaz, daha hızlı ve daha çok yanıt bulursun!


Offline Nikki Sixx

  • Semi-Newbie
  • *
  • Posts: 19
  • Gender: Male
Re: Hide SMF Version
« Reply #4 on: January 01, 2008, 02:32:07 PM »
"SMF" and "Simple Machines" are trademarks of Simple Machines LLC.

As a standard character mark, "SMF" is registered trademark of SMF Energy Corporation. However, since the word mark "SMF" is an acronym derived from "Simple Machines Forum," which is legally an unregistered trademark of Simple Machines LLC, I believe it can be claimed as a typed drawing and/or design trademark under the goods and services of the computer, scientific and legal classification.

Offline 青山 素子

  • SMF Super Hero
  • *******
  • Posts: 13,709
  • Just call me Motoko
    • Motoko's Pagoda
Re: Hide SMF Version
« Reply #5 on: January 01, 2008, 02:47:53 PM »
"SMF" and "Simple Machines" are trademarks of Simple Machines LLC.

As a standard character mark, "SMF" is registered trademark of SMF Energy Corporation. However, since the word mark "SMF" is an acronym derived from "Simple Machines Forum," which is legally an unregistered trademark of Simple Machines LLC, I believe it can be claimed as a typed drawing and/or design trademark under the goods and services of the computer, scientific and legal classification.

SMF is actually a service mark of SMF Energy Corporation. Also, it is in a different domain. This is how companies can hold trademarks on the same name (they are holding them in different categories). Also, you can claim common-law trademark status (using the TM symbol) as Simple Machines LLC is currently doing (at least in the US).

Also, this isn't really the place for a trademark discussion. Can we keep on topic?

Offline ALEJO

  • Jr. Member
  • **
  • Posts: 160
    • Buzarda
Re: Hide SMF Version
« Reply #6 on: January 03, 2008, 02:04:20 PM »
i still dont get for what this thing works... -.-" somebody can explain me? for what should i hide the version of the smf?
solo el mas paranoico sobrevive

Offline 青山 素子

  • SMF Super Hero
  • *******
  • Posts: 13,709
  • Just call me Motoko
    • Motoko's Pagoda
Re: Hide SMF Version
« Reply #7 on: January 03, 2008, 02:24:37 PM »
A lot is gone over in the "Rant" section in the readme.

You shouldn't need to hide your SMF version. In fact, it isn't really helpful at all.

A lot of people are under the impression that hiding the SMF version will protect them from hacking. It won't. Most attacks just try every possible vulnerability and see what sticks. Heck, often you will get attacks that are for software you don't even use. Of course, some people are so convinced wrongly they won't believe that and want to do it anyway.

The common method for hiding the version involves removing the version data. This also breaks the notices for SMF in the admin area. Basically, you won't get an alert if there is an important update. What this mod does is makes it so that the version is only hidden for non-admin users, which mean that update notices will still work properly.

So, do you need this mod? NO.
Is removing the version helpful in any way? Not really.
Why did I make the mod? To give those convinced they must hide the version a safe way to do so that doesn't break functionality.

Offline ALEJO

  • Jr. Member
  • **
  • Posts: 160
    • Buzarda
Re: Hide SMF Version
« Reply #8 on: January 03, 2008, 04:02:42 PM »
is clear now :P thx
solo el mas paranoico sobrevive

Offline Anatis

  • Newbie
  • *
  • Posts: 8
Re: Hide SMF Version
« Reply #9 on: February 01, 2008, 05:58:45 PM »
Well.
It broke my board, methinks. I now get "SMF blabla" and "legal requirement" on everything. :/
Ripped it out and I still get it and it was the only change. (1.1.4, but with Tinyportal)
Core template, too.

Offline 青山 素子

  • SMF Super Hero
  • *******
  • Posts: 13,709
  • Just call me Motoko
    • Motoko's Pagoda
Re: Hide SMF Version
« Reply #10 on: February 03, 2008, 02:39:00 PM »
The only major changes this makes:

For index.php

Find:
Code: [Select]
// Load the user's cookie (or set as guest) and load their settings.
loadUserSettings();

Add the following BEFORE that:
Code: [Select]

//If the user isn't an admin, then hide the version'
if(!$user_info['is_admin'] && !empty($modSettings['hideVersion']) && $modSettings['hideVersion'])
$GLOBALS['forum_version'] = 'SMF';

For sources/ModSettings.php (this is just a simple toggle):

Find:
Code: [Select]
array('check', 'securityDisable'),

Add this BEFORE:
Code: [Select]
array('check', 'hideVersion'),


There is also one language line added to the modification language file.


Try reversing those steps manually if uninstall doesn't work for some reason.

Offline 青山 素子

  • SMF Super Hero
  • *******
  • Posts: 13,709
  • Just call me Motoko
    • Motoko's Pagoda
Re: Hide SMF Version
« Reply #11 on: March 23, 2008, 03:26:21 PM »
Mod updated for 2.0 Beta 3 Public. Also bundled in the Turkish translation from earlier in the topic.

The update wasn't too difficult, I just needed to change ModSettings.php to ManageSettings.php in the install.

Offline Basie

  • Jr. Member
  • **
  • Posts: 352
Re: Hide SMF Version
« Reply #12 on: March 25, 2008, 07:35:10 PM »
Thanks for this mod.

I use it because I don't want my 'competitor' sites/rivals to know what version I'm using (and not for anti-hacking reasons).

Anyway, in the admin CP it says...

Quote
   Hide SMF version from normal users

Can you please specify exactly what you mean by a 'normal' user?

Offline 青山 素子

  • SMF Super Hero
  • *******
  • Posts: 13,709
  • Just call me Motoko
    • Motoko's Pagoda
Re: Hide SMF Version
« Reply #13 on: March 25, 2008, 09:16:54 PM »
Anyway, in the admin CP it says...

Quote
   Hide SMF version from normal users

Can you please specify exactly what you mean by a 'normal' user?

Any user that isn't an administrator. I couldn't think of any other compact way to say it.

Offline Joomlamz

  • SMF Hero
  • ******
  • Posts: 2,166
  • Gender: Male
  • Suporte Joomla.co.mz
    • Webdesign
Re: Hide SMF Version
« Reply #14 on: March 26, 2008, 12:42:04 AM »
thank
updated for 2.0 Beta 3 Public

Hosting Free for SMF - PACOTE 500MB

Alguma duvida pode me mandar MP que tera Suporte

Offline CubaLibre

  • Newbie
  • *
  • Posts: 4
Re: Hide SMF Version
« Reply #15 on: April 17, 2008, 01:21:40 PM »
[EDIT]Ok i find it in ACP it's on Security and Moderation, not on Features and Options  ;)
« Last Edit: April 17, 2008, 01:30:17 PM by CubaLibre »

Offline PrizeLive.com

  • Full Member
  • ***
  • Posts: 683
    • PrizeLive.com
Re: Hide SMF Version
« Reply #16 on: April 21, 2008, 07:50:31 PM »
Just installed this mod successfully but I can't find it where it said it would be " Admin -> Features and Options -> Basic Features ".

Using version 1.1.4 and the Default theme.
Get Paid Instantly via PayPal (or other options) at PrizeLive.com!

Offline 2pac

  • Jr. Member
  • **
  • Posts: 235
  • Gender: Male
  • Str8 Ballin'
Re: Hide SMF Version
« Reply #17 on: May 25, 2008, 06:19:44 AM »
Just installed this mod successfully but I can't find it where it said it would be " Admin -> Features and Options -> Basic Features ".

Using version 1.1.4 and the Default theme.

Im not too sure where it would be on 1.1.4 but on 2.0 beta it's under Configuration > Security and Moderation > General

Offline SantaClaws

  • Full Member
  • ***
  • Posts: 481
Re: Hide SMF Version
« Reply #18 on: May 25, 2008, 06:26:33 AM »
Admin CP>>Features And Options>>Basic Features>>Scroll Down>>Tick Hide SMF version from normal users.

There. Tell me if it helps if not i'll try get pics.

Offline Dark-Wolf

  • Jr. Member
  • **
  • Posts: 306
  • Gender: Male
    • DarkWolf
Re: Hide SMF Version
« Reply #19 on: July 28, 2008, 11:06:22 AM »
Thanks!
Here is Italian language:
Quote
//Hide SMF Version
$txt['hideVersion'] = 'Nascondi la versione di SMF agli utenti standard';
  :)
« Last Edit: July 28, 2008, 04:04:31 PM by Dark-Wolf »