Converting SA_auth to SMF

wargames · May 29, 2012, 07:27:31 PM

So what do I do to convert this registerauthentication page to smf?

1.
<?php

 2.
session_start();

 3.
 

 4.
$forum_path = '/var/www/vhosts/gooncave.com/msw/forums/';

 5.
 

 6.
define( 'IPB_THIS_SCRIPT', 'public' );

 7.
define( 'IPS_ENFORCE_ACCESS', 'true' );

 8.
 

 9.
require_once( $forum_path . 'initdata.php' );

 10.
require_once( IPS_ROOT_PATH . 'sources/base/ipsRegistry.php' );

 11.
require_once( IPS_ROOT_PATH . 'sources/base/ipsController.php' );

 12.
 

 13.
$ipbRegistry = ipsRegistry::instance();

 14.
$ipbRegistry->init();

 15.
 

 16.
$cookieData =& $ipbRegistry->member()->fetchMemberData();

 17.
 

 18.
echo "<html>

 19.
<head>

 20.
<title>MSW - SA Authorization</title>

 21.
<link rel='shortcut icon' type='image/x-icon' href='/favicon.ico'>

 22.
<link rel='stylesheet' type='text/css' media='screen,print' href='http://www.maraudershewrote.org/forums/public/min/index.php?ipbv=32006&amp;f=public/style_css/css_4/calendar_select.css,public/style_css/css_4/ipb_common.css,public/style_css/css_4/ipb_styles.css' />

 23.
</head>

 24.
<body>

 25.
<h3 class='pagetop'>SA Authorization</h3>

 26.
<div class='content navigation'>

 27.
</div>\n<br><br><br>

 28.
<div class='wrapper'><div class='content'>

 29.
<div id='content' class='clearfix'>

 30.
<div class='guestMessage'><center>";

 31.
 

 32.
 

 33.
if ( $cookieData['member_id'] )

 34.
{

 35.
        if ( $cookieData['member_group_id'] == 3 )              // Allow only member_group_id == 3, which is 'Unauthorized Members'

 36.
        {

 37.
                # Forums Info

 38.
                $mswUsername    = $cookieData['name'];

 39.
                $mswMemberID    = $cookieData['member_id'];

 40.
                

41.
                # Start of SomethingAwful Auth

 42.
                if ( !$_POST )

 43.
                {

 44.
                        # Generate a key to verify the user

 45.
                        $key = sha1(rand(1000000, 9999999));

 46.
                        $_SESSION['auth_key']    = $key;

 47.
                        $_SESSION['auth_done']   = "no";

 48.
                        $_SESSION['auth_action'] = "signup";

 49.
 

 50.
                        echo "<script language='Javascript'>

 51.
function validate()

 52.
{

 53.
if ( !document.auth.sausername.value )

 54.
{

 55.
        alert('You must enter your SA username');

 56.
        return false;

 57.
} else

 58.
        return true;

 59.
}

 60.
</script>

 61.
<b>Welcome to the Marauder She Wrote forums!</b><br>

 62.
We're open to all SA forum members.  Use this page to verify that you're an SA forum member.<br><br>

 63.
 

 64.
To do this, <a href='http://forums.somethingawful.com/member.php?s=&action=editprofile' target='_blank'>edit your SA profile</a>, and add this key to your Interests field:<br>

 65.
<b>" . $key . "</b><br>

 66.
(notice: this key changes each refresh)

 67.
<br/><br/>

 68.
Once you've done that, enter your SA username below, and click Continue.

 69.
<br/><br/>

 70.
<form name='auth' method='post'>

 71.
Your SA Username: <input type='text' name='sausername'>

 72.
<input type='hidden' name='auth_key' value='" . $_SESSION['auth_key'] . "'>

 73.
<input type='submit' onclick='return validate()' name='submit' value='Continue'>

 74.
</center>

 75.
</form>

 76.
</div></div></div></div>";

 77.
                }

 78.
                else

 79.
                {

 80.
                        if ( !isset( $_SESSION['auth_key'] ) )

 81.
                        {

 82.
                                

83.
                                echo "<div class='content warning'>Sorry, looks like your key expired.  Press Back and try again.</div>";

 84.
                                exit();

 85.
                        } elseif ( $_SESSION['auth_key'] != $_POST['auth_key'] ) 

86.
                        {

 87.
                                echo "<div class='content warning'>Key mismatch.  Press back and try again.</div>";

 88.
                                exit();

 89.
                        }

 90.
 

 91.
                        # The user we want to check, and they key to check

 92.
                        $user = $_POST['sausername'];

 93.
                        $key = $_SESSION['auth_key'];

 94.
 

 95.
                        # Setup values to use in the CURL operation

 96.
                        $en = 'action=getinfo&username=' . urlencode($user);

 97.
                        $profile_encode = 'http://forums.somethingawful.com/member.php?' . $en;

 98.
                        $login = array('action' => 'login', 'username' => 'Solysh', 'password' => 'Micro%20Hax0r');

 99.
 

 100.
                        # Logfile Access                        

101.
                        //$logfile = '/var/www/vhosts/gooncave.com/msw/debug.txt';

 102.
                        //$open = fopen($logfile, 'w');

 103.
 

 104.
                        # These aren't necessary, but it helps to prevent setting off any alarms

 105.
                        $useragent = 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0';

 106.
                        $referer = 'http://forums.somethingawful.com/usercp.php?s=';

 107.
 

 108.
                        # Initialize CURL and start collecting the output buffer

 109.
                        $ch = curl_init();

 110.
 

 111.
                        # Setup CURL options

 112.
                        curl_setopt($ch, CURLOPT_URL, "http://forums.somethingawful.com/account.php");

 113.
                        curl_setopt($ch, CURLOPT_POST, TRUE);

 114.
                        curl_setopt($ch, CURLOPT_POSTFIELDS, $login);

 115.
                        curl_setopt($ch, CURLOPT_HEADER, TRUE);

 116.
                        curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);

 117.
                        curl_setopt($ch, CURLOPT_VERBOSE, TRUE);

 118.
                        //curl_setopt($ch, CURLOPT_STDERR, $open);

 119.
                        curl_setopt($ch, CURLOPT_COOKIESESSION, true);

 120.
                        curl_setopt($ch, CURLOPT_COOKIEJAR, "cookies.txt");

 121.
                        curl_setopt($ch, CURLOPT_COOKIEFILE, "cookies.txt");                    

122.
                        curl_setopt($ch, CURLOPT_USERAGENT, $useragent);

 123.
                        curl_setopt($ch, CURLOPT_REFERER, $referer);

 124.
                        $result = curl_exec ($ch);

 125.
 

 126.
                        curl_setopt($ch, CURLOPT_HTTPGET, TRUE);

 127.
                        curl_setopt($ch, CURLOPT_URL, "http://forums.somethingawful.com/index.php");

 128.
                        $response = curl_exec ($ch);

 129.
 

 130.
                        curl_setopt($ch, CURLOPT_URL, $profile_encode);

 131.
                        curl_setopt($ch, CURLINFO_HEADER_OUT, TRUE);

 132.
                        $response = curl_exec ($ch);

 133.
                        $headers = curl_getinfo($ch, CURLINFO_HEADER_OUT);

 134.
 

 135.
                        # SA Scrape Debug

 136.
                        //echo $headers;

 137.
                        //echo "<hr />";

 138.
                        //echo $profile_encode;

 139.
                        //echo "<hr />";

 140.
                        //echo $result2;

 141.
                        //echo "<hr />";

 142.
 

 143.
                        $x = curl_version();

 144.
                        if ( $response == "" )

 145.
                        {

 146.
                                echo "<div class='content warning'>The signup system is down!  Please report this to Solysh. (No response from SA forums: " . curl_errno($ch) . " " . curl_error($ch) .")</div>";

 147.
                        } elseif ( strpos($response, 'This user has not registered and therefore does not have a profile to view.') ) 

148.
                        {

 149.
                                echo "<div class='content warning'>I could not find your profile, did you type your nickname correctly?  Press back and try again.</div>";

 150.
                        } elseif ( strpos($response, 'You are not logged in') ) 

151.
                        {

 152.
                                echo "<div class='content warning'>The signup system is down!  Please report this to Solysh. (Could not log in)</div>";

 153.
                        } elseif ( strpos($response, 'Special Message from Senor Lowtax') ) 

154.
                        {

 155.
                                echo "<div class='content warning'>There was a problem checking your nickname against the forums. (Special message from Senor Lowtax - forums down?)</div>";

 156.
                        } elseif ( strpos($response, $key) ) 

157.
                        {

 158.
                                # Begin session cleanup

 159.
                                $_SESSION['auth_done'] = 'yes';

 160.
                                $_SESSION['auth_username'] = $_POST['sausername'];

 161.
                                unset( $_SESSION['auth_key'] );

 162.
                                

163.
                                # Load their Userinfo from the IPB Database

 164.
                                $dbInfo = IPSMember::load( $cookieData['member_id'], 'pfields_content' );

 165.
                                

166.
                                # Change users forum group to 'Members' (7) and adds their SA Name to their profile

 167.
                                $update = IPSMember::save( $cookieData['member_id'], array( 'members' => array( 'member_group_id' => '7' ), 'pfields_content' => array( 'field_11' => $user ) ) );

 168.
                                

169.
                                # Congrats!

 170.
                                echo "<h3>Well done, " . $cookieData['name'] . "!</h3>\n<div class='content current'>\nThank you, you have now been verified as a forum member.\n

 171.
                                <b>First, <a href='http://forums.somethingawful.com/member.php?s=&action=editprofile'>edit your SA profile</a> again, and remove the key.</b><br><br></div>";

 172.
                        } else 

173.
                        {

 174.
                                echo "<div class='content warning'>I couldn't see your key ( <b>" . $_SESSION['auth_key'] . "</b> ) in your profile.  Press Back and try again.</div>";

 175.
                        }

 176.
                        curl_close($ch);

 177.
                }                       

178.
        } else {

 179.
                echo "ERROR:  User is not an 'Unauthorized Member'<br><br>\n";

 180.
 

 181.
                // Forums Info

 182.
                echo "Forums Username: " . $cookieData['name'] . "<br>\n";

 183.
                echo "Forums memberID: " . $cookieData['member_id'] . "<br>\n";

 184.
                echo "Forums Group ID: " . $cookieData['member_group_id'] . "<br>\n";

 185.
        }

 186.
} else {

 187.
        echo "User is not logged into the MSW forums.<br>\n";

 188.
}

 189.
?>

 190.
</div></div></div></div>

emanuele · May 30, 2012, 06:25:24 AM

Hello wargames and welcome to sm.org!

Do you have a version without all the line numbers and empty lines?
That would help a bit...at least it would help me...

In general, one thing you could do is:

Code Select

<?php
require_once('/path/to/smf/SSI.php');
if ($user_info['is_guest']))
{
// the user is not logged in
}
else
{
// the user is logged in
}

if (in_array(3, $user_info['groups']))
{
// member belongs to group 3
}
else
{
// member doesn't belong to group 3
}

wargames · May 30, 2012, 07:31:10 AM

This should help. But the main thing that I really want from this is that it makes a random code, and looks for that random code on a differant forum, before you can register. Hope that helps and thanks in advance.

Code Select

<?php
session_start();

$forum_path = '/var/www/vhosts/gooncave.com/msw/forums/';

define( 'IPB_THIS_SCRIPT', 'public' );
define( 'IPS_ENFORCE_ACCESS', 'true' );

require_once( $forum_path . 'initdata.php' );
require_once( IPS_ROOT_PATH . 'sources/base/ipsRegistry.php' );
require_once( IPS_ROOT_PATH . 'sources/base/ipsController.php' );

$ipbRegistry = ipsRegistry::instance();
$ipbRegistry->init();

$cookieData =& $ipbRegistry->member()->fetchMemberData();

echo "<html>
<head>
<title>MSW - SA Authorization</title>
<link rel='shortcut icon' type='image/x-icon' href='/favicon.ico'>
<link rel='stylesheet' type='text/css' media='screen,print' href='http://www.maraudershewrote.org/forums/public/min/index.php?ipbv=32006&amp;f=public/style_css/css_4/calendar_select.css,public/style_css/css_4/ipb_common.css,public/style_css/css_4/ipb_styles.css' />
</head>
<body>
<h3 class='pagetop'>SA Authorization</h3>
<div class='content navigation'>
</div>\n<br><br><br>
<div class='wrapper'><div class='content'>
<div id='content' class='clearfix'>
<div class='guestMessage'><center>";


if ( $cookieData['member_id'] )
{
	if ( $cookieData['member_group_id'] == 3 )		// Allow only member_group_id == 3, which is 'Unauthorized Members'
	{
		# Forums Info
		$mswUsername 	= $cookieData['name'];
		$mswMemberID	= $cookieData['member_id'];
		
		# Start of SomethingAwful Auth
		if ( !$_POST )
		{
			# Generate a key to verify the user
			$key = sha1(rand(1000000, 9999999));
			$_SESSION['auth_key'] 	 = $key;
			$_SESSION['auth_done']   = "no";
			$_SESSION['auth_action'] = "signup";

			echo "<script language='Javascript'>
function validate()
{
if ( !document.auth.sausername.value )
{
	alert('You must enter your SA username');
	return false;
} else
	return true;
}
</script>
<b>Welcome to the Marauder She Wrote forums!</b><br>
We're open to all SA forum members.  Use this page to verify that you're an SA forum member.<br><br>

To do this, <a href='http://forums.somethingawful.com/member.php?s=&action=editprofile' target='_blank'>edit your SA profile</a>, and add this key to your Interests field:<br>
<b>" . $key . "</b><br>
(notice: this key changes each refresh)
<br/><br/>
Once you've done that, enter your SA username below, and click Continue.
<br/><br/>
<form name='auth' method='post'>
Your SA Username: <input type='text' name='sausername'>
<input type='hidden' name='auth_key' value='" . $_SESSION['auth_key'] . "'>
<input type='submit' onclick='return validate()' name='submit' value='Continue'>
</center>
</form>
</div></div></div></div>";
		}
		else
		{
			if ( !isset( $_SESSION['auth_key'] ) )
			{
				
				echo "<div class='content warning'>Sorry, looks like your key expired.  Press Back and try again.</div>";
				exit();
			} elseif ( $_SESSION['auth_key'] != $_POST['auth_key'] ) 
			{
				echo "<div class='content warning'>Key mismatch.  Press back and try again.</div>";
				exit();
			}

			# The user we want to check, and they key to check
			$user = $_POST['sausername'];
			$key = $_SESSION['auth_key'];

			# Setup values to use in the CURL operation
			$en = 'action=getinfo&username=' . urlencode($user);
			$profile_encode = 'http://forums.somethingawful.com/member.php?' . $en;
			$login = array('action' => 'login', 'username' => 'wargames', 'password' => '');

			# Logfile Access			
			//$logfile = '/var/www/vhosts/gooncave.com/msw/debug.txt';
			//$open = fopen($logfile, 'w');

			# These aren't necessary, but it helps to prevent setting off any alarms
			$useragent = 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0';
			$referer = 'http://forums.somethingawful.com/usercp.php?s=';

			# Initialize CURL and start collecting the output buffer
			$ch = curl_init();

			# Setup CURL options
			curl_setopt($ch, CURLOPT_URL, "http://forums.somethingawful.com/account.php");
			curl_setopt($ch, CURLOPT_POST, TRUE);
			curl_setopt($ch, CURLOPT_POSTFIELDS, $login);
			curl_setopt($ch, CURLOPT_HEADER, TRUE);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
			curl_setopt($ch, CURLOPT_VERBOSE, TRUE);
			//curl_setopt($ch, CURLOPT_STDERR, $open);
			curl_setopt($ch, CURLOPT_COOKIESESSION, true);
			curl_setopt($ch, CURLOPT_COOKIEJAR, "cookies.txt");
			curl_setopt($ch, CURLOPT_COOKIEFILE, "cookies.txt");			
			curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
			curl_setopt($ch, CURLOPT_REFERER, $referer);
			$result = curl_exec ($ch);

			curl_setopt($ch, CURLOPT_HTTPGET, TRUE);
			curl_setopt($ch, CURLOPT_URL, "http://forums.somethingawful.com/index.php");
			$response = curl_exec ($ch);

			curl_setopt($ch, CURLOPT_URL, $profile_encode);
			curl_setopt($ch, CURLINFO_HEADER_OUT, TRUE);
			$response = curl_exec ($ch);
			$headers = curl_getinfo($ch, CURLINFO_HEADER_OUT);

			# SA Scrape Debug
			//echo $headers;
			//echo "<hr />";
			//echo $profile_encode;
			//echo "<hr />";
			//echo $result2;
			//echo "<hr />";

			$x = curl_version();
			if ( $response == "" )
			{
				echo "<div class='content warning'>The signup system is down!  Please report this to wargames. (No response from SA forums: " . curl_errno($ch) . " " . curl_error($ch) .")</div>";
			} elseif ( strpos($response, 'This user has not registered and therefore does not have a profile to view.') ) 
			{
				echo "<div class='content warning'>I could not find your profile, did you type your nickname correctly?  Press back and try again.</div>";
			} elseif ( strpos($response, 'You are not logged in') ) 
			{
				echo "<div class='content warning'>The signup system is down!  Please report this to wargames. (Could not log in)</div>";
			} elseif ( strpos($response, 'Special Message from Senor Lowtax') ) 
			{
				echo "<div class='content warning'>There was a problem checking your nickname against the forums. (Special message from Senor Lowtax - forums down?)</div>";
			} elseif ( strpos($response, $key) ) 
			{
				# Begin session cleanup
				$_SESSION['auth_done'] = 'yes';
				$_SESSION['auth_username'] = $_POST['sausername'];
				unset( $_SESSION['auth_key'] );
				
				# Load their Userinfo from the IPB Database
				$dbInfo = IPSMember::load( $cookieData['member_id'], 'pfields_content' );
				
				# Change users forum group to 'Members' (7) and adds their SA Name to their profile
				$update = IPSMember::save( $cookieData['member_id'], array( 'members' => array(	'member_group_id' => '7' ), 'pfields_content' => array( 'field_11' => $user ) ) );
				
				# Congrats!
				echo "<h3>Well done, " . $cookieData['name'] . "!</h3>\n<div class='content current'>\nThank you, you have now been verified as a forum member.\n
				<b>First, <a href='http://forums.somethingawful.com/member.php?s=&action=editprofile'>edit your SA profile</a> again, and remove the key.</b><br><br></div>";
			} else 
			{
				echo "<div class='content warning'>I couldn't see your key ( <b>" . $_SESSION['auth_key'] . "</b> ) in your profile.  Press Back and try again.</div>";
			}
			curl_close($ch);
		}			
	} else {
		echo "ERROR:  User is not an 'Unauthorized Member'<br><br>\n";

		// Forums Info
		echo "Forums Username: " . $cookieData['name'] . "<br>\n";
		echo "Forums memberID: " . $cookieData['member_id'] . "<br>\n";
		echo "Forums Group ID: " . $cookieData['member_group_id'] . "<br>\n";
	}
} else {
	echo "User is not logged into the MSW forums.<br>\n";
}
?>
</div></div></div></div>

emanuele · May 31, 2012, 07:58:08 AM

Okay, that seems a bit different.

The procedure should be:
1) forum1 is where the user already exists
2) forum2 is the forum where the user should register
3) forum2 at registration (or better the code you are posting) checks the cookie of forum1 and if it's present, the code provides a random code and asks the user to introduce that code into the appropriate field in forum1
4) forum2 then needs to retrieve this code from forum1 and verify that is the same and act in accordance.

Is it correct?
If so, SMF is on forum1, forum2 or both?

wargames · May 31, 2012, 08:57:26 AM

Yes that is what I am looking for except for the lack of cookie at step 3. SMF is forum 2 and forum 1 is Something Awful.

emanuele · May 31, 2012, 09:42:42 AM

Sorry, I was re-reading the code (probably a bit less sleepy) and it seems that at step 3 it checks for cookie of forum2, not forum1, so the user should already be registered at forum2 (and be part of membergroup 3) before being able to verify if it is already registered at forum1...sorry for the confusion, I'm trying to understand...

If this last version is correct then the method I suggested before is fine, you don't need to pass from the cookie (of course you can if you want, but doesn't change much except that using my method is SMF itself that takes care of the cookie).

wargames · May 31, 2012, 09:45:17 AM

Quote from: emanuele on May 31, 2012, 09:42:42 AM
Sorry, I was re-reading the code (probably a bit less sleepy) and it seems that at step 3 it checks for cookie of forum2, not forum1, so the user should already be registered at forum2 (and be part of membergroup 3) before being able to verify if it is already registered at forum1...sorry for the confusion, I'm trying to understand...

If this last version is correct then the method I suggested before is fine, you don't need to pass from the cookie (of course you can if you want, but doesn't change much except that using my method is SMF itself that takes care of the cookie).

I know very little about code and this was handed to me. So do what you think is right.

emanuele · May 31, 2012, 09:53:49 AM

One last question: is the script currently in place?
So if I try to register at your forum I'll see it asking me for the code?

wargames · May 31, 2012, 10:52:02 AM

Quote from: emanuele on May 31, 2012, 09:53:49 AM
One last question: is the script currently in place?
So if I try to register at your forum I'll see it asking me for the code?

The code is not on my smf site but it is on the other site this is where I got the code from. http://www.maraudershewrote.org/forums/ [nofollow]

But I am trying to get the code to work here. http://mwo.gooncave.com/ [nofollow]

emanuele · May 31, 2012, 12:08:36 PM

Code Select

<?php
$forum_path = '/var/www/vhosts/gooncave.com/msw/forums/';

require_once( $forum_path . 'SSI.php' );

echo "<html>
<head>
<title>MSW - SA Authorization</title>
<link rel='shortcut icon' type='image/x-icon' href='/favicon.ico'>
<!-- CHANGE THE CSS FILE HERE -->
<link rel='stylesheet' type='text/css' media='screen,print' href='http://www.maraudershewrote.org/forums/public/min/index.php?ipbv=32006&amp;f=public/style_css/css_4/calendar_select.css,public/style_css/css_4/ipb_common.css,public/style_css/css_4/ipb_styles.css' />
</head>
<body>
<h3 class='pagetop'>SA Authorization</h3>
<div class='content navigation'>
</div>\n<br><br><br>
<div class='wrapper'><div class='content'>
<div id='content' class='clearfix'>
<div class='guestMessage'><center>";


if ( !empty($user_info['id'] ))
{
	if ( in_array(3, $user_info['groups']) )		// Allow only member_group_id == 3, which is 'Unauthorized Members'
	{
		# Forums Info
		$mswUsername 	= $user_info['name'];
		$mswMemberID	= $user_info['id'];
		
		# Start of SomethingAwful Auth
		if ( !$_POST )
		{
			# Generate a key to verify the user
			$key = sha1(rand(1000000, 9999999));
			$_SESSION['auth_key'] 	 = $key;
			$_SESSION['auth_done']   = "no";
			$_SESSION['auth_action'] = "signup";

			echo "<script language='Javascript'>
function validate()
{
if ( !document.auth.sausername.value )
{
	alert('You must enter your SA username');
	return false;
} else
	return true;
}
</script>
<b>Welcome to the Marauder She Wrote forums!</b><br>
We're open to all SA forum members.  Use this page to verify that you're an SA forum member.<br><br>

To do this, <a href='http://forums.somethingawful.com/member.php?s=&action=editprofile' target='_blank'>edit your SA profile</a>, and add this key to your Interests field:<br>
<b>" . $key . "</b><br>
(notice: this key changes each refresh)
<br/><br/>
Once you've done that, enter your SA username below, and click Continue.
<br/><br/>
<form name='auth' method='post'>
Your SA Username: <input type='text' name='sausername'>
<input type='hidden' name='auth_key' value='" . $_SESSION['auth_key'] . "'>
<input type='submit' onclick='return validate()' name='submit' value='Continue'>
</center>
</form>
</div></div></div></div>";
		}
		else
		{
			if ( !isset( $_SESSION['auth_key'] ) )
			{
				
				echo "<div class='content warning'>Sorry, looks like your key expired.  Press Back and try again.</div>";
				exit();
			} elseif ( $_SESSION['auth_key'] != $_POST['auth_key'] ) 
			{
				echo "<div class='content warning'>Key mismatch.  Press back and try again.</div>";
				exit();
			}

			# The user we want to check, and they key to check
			$user = $_POST['sausername'];
			$key = $_SESSION['auth_key'];

			# Setup values to use in the CURL operation
			$en = 'action=getinfo&username=' . urlencode($user);
			$profile_encode = 'http://forums.somethingawful.com/member.php?' . $en;
			$login = array('action' => 'login', 'username' => 'wargames', 'password' => '');

			# Logfile Access			
			//$logfile = '/var/www/vhosts/gooncave.com/msw/debug.txt';
			//$open = fopen($logfile, 'w');

			# These aren't necessary, but it helps to prevent setting off any alarms
			$useragent = 'Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0';
			$referer = 'http://forums.somethingawful.com/usercp.php?s=';

			# Initialize CURL and start collecting the output buffer
			$ch = curl_init();

			# Setup CURL options
			curl_setopt($ch, CURLOPT_URL, "http://forums.somethingawful.com/account.php");
			curl_setopt($ch, CURLOPT_POST, TRUE);
			curl_setopt($ch, CURLOPT_POSTFIELDS, $login);
			curl_setopt($ch, CURLOPT_HEADER, TRUE);
			curl_setopt($ch, CURLOPT_RETURNTRANSFER, TRUE);
			curl_setopt($ch, CURLOPT_VERBOSE, TRUE);
			//curl_setopt($ch, CURLOPT_STDERR, $open);
			curl_setopt($ch, CURLOPT_COOKIESESSION, true);
			curl_setopt($ch, CURLOPT_COOKIEJAR, "cookies.txt");
			curl_setopt($ch, CURLOPT_COOKIEFILE, "cookies.txt");			
			curl_setopt($ch, CURLOPT_USERAGENT, $useragent);
			curl_setopt($ch, CURLOPT_REFERER, $referer);
			$result = curl_exec ($ch);

			curl_setopt($ch, CURLOPT_HTTPGET, TRUE);
			curl_setopt($ch, CURLOPT_URL, "http://forums.somethingawful.com/index.php");
			$response = curl_exec ($ch);

			curl_setopt($ch, CURLOPT_URL, $profile_encode);
			curl_setopt($ch, CURLINFO_HEADER_OUT, TRUE);
			$response = curl_exec ($ch);
			$headers = curl_getinfo($ch, CURLINFO_HEADER_OUT);

			# SA Scrape Debug
			//echo $headers;
			//echo "<hr />";
			//echo $profile_encode;
			//echo "<hr />";
			//echo $result2;
			//echo "<hr />";

			$x = curl_version();
			if ( $response == "" )
			{
				echo "<div class='content warning'>The signup system is down!  Please report this to wargames. (No response from SA forums: " . curl_errno($ch) . " " . curl_error($ch) .")</div>";
			} elseif ( strpos($response, 'This user has not registered and therefore does not have a profile to view.') ) 
			{
				echo "<div class='content warning'>I could not find your profile, did you type your nickname correctly?  Press back and try again.</div>";
			} elseif ( strpos($response, 'You are not logged in') ) 
			{
				echo "<div class='content warning'>The signup system is down!  Please report this to wargames. (Could not log in)</div>";
			} elseif ( strpos($response, 'Special Message from Senor Lowtax') ) 
			{
				echo "<div class='content warning'>There was a problem checking your nickname against the forums. (Special message from Senor Lowtax - forums down?)</div>";
			} elseif ( strpos($response, $key) ) 
			{
				# Begin session cleanup
				$_SESSION['auth_done'] = 'yes';
				$_SESSION['auth_username'] = $_POST['sausername'];
				unset( $_SESSION['auth_key'] );
				
				require_once($sourcedir . '/Subs-MemberGroups.php');
				# Change users forum group to 'Members' (7) and adds their SA Name to their profilez
				addMembersToGroup($user_info['id'], 7, 'only_additional', true);
				
				# Congrats!
				echo "<h3>Well done, " . $user_info['name'] . "!</h3>\n<div class='content current'>\nThank you, you have now been verified as a forum member.\n
				<b>First, <a href='http://forums.somethingawful.com/member.php?s=&action=editprofile'>edit your SA profile</a> again, and remove the key.</b><br><br></div>";
			} else 
			{
				echo "<div class='content warning'>I couldn't see your key ( <b>" . $_SESSION['auth_key'] . "</b> ) in your profile.  Press Back and try again.</div>";
			}
			curl_close($ch);
		}			
	} else {
		echo "ERROR:  User is not an 'Unauthorized Member'<br><br>\n";

		// Forums Info
		echo "Forums Username: " . $user_info['name'] . "<br>\n";
		echo "Forums memberID: " . $user_info['id'] . "<br>\n";
		echo "Forums Group ID: " . implode(',', $user_info['groups']) . "<br>\n";
	}
} else {
	echo "User is not logged into the MSW forums.<br>\n";
}
?>
</div></div></div></div>

That should do what you want.

Please remember that in SMF the membergroup 3 is a special group (i.e. board moderators), so most likely you'll have to change it so something else.

Edit: fixed a couple of bugs in the code.

wargames · May 31, 2012, 12:54:42 PM

Thanks alot now I got to figure out how to impliment it into the MWO forums.

wargames · May 31, 2012, 06:39:06 PM

Well I am getting a 500 internal error with the script and I have no clue what I am doing wrong. http://mwo.gooncave.com/sa_auth.php [nofollow]

updated pastebin http://pastebin.com/P9KPihxh [nofollow]

emanuele · May 31, 2012, 07:30:24 PM

500 is frequently due to wrong file permissions.
If you have it 777 try use 755 or even 644.

wargames · May 31, 2012, 07:37:54 PM

sadly changing the permissions didn't help.

emanuele · June 01, 2012, 03:34:32 AM

You changed the path in the file and removed the trailing slash, so now you have to change this:

Code Select

require_once( $forum_path . 'SSI.php' );
to

Code Select

require_once( $forum_path . '/SSI.php' );

wargames · June 01, 2012, 10:20:21 AM

Done, and 500 error still exists. Also is it alright is I set you up a webmaster account or something so you can poke at the faulty php directly?

emanuele · June 03, 2012, 09:35:23 AM

If you want, yes no problems.

emanuele · June 08, 2012, 04:56:40 PM

Sorry for coming back to you so late...

I used the ftp account you provided to fix the errors.
There was a missing closing parenthesis at line 22 and a missing semi-colon at line 154.

Sorry again for the late reply.

wargames · June 09, 2012, 03:25:18 PM

Quote from: emanuele on June 08, 2012, 04:56:40 PM
Sorry for coming back to you so late...

I used the ftp account you provided to fix the errors.
There was a missing closing parenthesis at line 22 and a missing semi-colon at line 154.

Sorry again for the late reply.

that is 100% ok since you got it working, Now I have to change the memeber group id its looking for to Registered Members. Because It doesn't seems to be looking for newly registered users their memeber group doesn't seem to be the one its looking for and it seems to be a hidden memeber group.

Edit: Welp It looks like no matter what membergroup you put in at line 24 it returns as ERROR: User is not an 'Unauthorized Member'

emanuele · June 10, 2012, 03:35:33 PM

If a member is a "regular member" (i.e. just registered), he belongs to groups 0 and 4.
0 is the "regular members" group (i.e. just registered without any specific primary group.
4 is the "newbie" groups (post count based).

So, probably you don't even need that particular check...

News:

Converting SA_auth to SMF