Question2Answer Q&A - Recent questions tagged hack

Important plugin or Core Hack required?

Wed, 06 May 2020 12:08:06 +0000

Can anyone make a plugin or core hack for setting these values:

1. Setting Minimum points required for asking a question. ex - 10 points

2. Set minimum points required for Adding comments. ex - 5 points

3. Set minimum points required for Voting posts (questions, answers, comments) down. ex - 100 points

4. Any user can set custom points to be awarded on answering his question.

Plugin should have ability to set custom message that will be shown to users when performing those above actions.

Important: All feature that have been stated above are aleady available in q2a core. But it has some drawback that are

1. Setting Minimum points required for asking a question. ex - 10 points

Drawback: It simply hide ask button from menu and user can not see ask buatton to ask question. And if user for the url /ask then it simply says "you are not allowed to perform this action".

Solution: It should show ask menu to every user everytime, but when user visit that link it should show custom message that "You do not have enough points to ask question. Collect points by answering other's questions. You need at least 10 points to ask a question."

And then it should show some newest Unanswered questions to that user to answer and collect points. It should also show points beside question so that user should be how much points will he get by answering that specific question.

2. Set minimum points required for Adding comments. ex - 5 points

Drawback: It simply hide comment button and user can not see comment button to add comment.

Solution: It should show comment button to every user everytime, but when user click on comment button it should show custom popup that "You do not have enough points to comment on post. Collect points by answering other's questions. You need at least 5 points to comment on post."

3. Set minimum points required for Voting posts (questions, answers, comments) down. ex - 100 points

Drawback: It do not show custom message.

4. 4. Any user can set custom points to be awarded on answering his question.

Solution Example: 1. When user go to ask a question then in question form there should one extra field to set points set for the question.

User should have the option to select from the drop-down menu

When user answer that question then the points will be given that is set by user.

Is it completely safe 1.8?

Fri, 30 Nov 2018 02:33:39 +0000

Hello there.

I was using version 1.7.5 before. There were thousands of users and thousands of questions. One day, the hacker site in another country uploaded our index file. What I'm saying is, is this an attack like this in the 1.8 version I'm using right now? What should I do if there is an attack?

Let me ask you: can I find out if there is a file vulnerability on the site?

So, if they want to change the index file again, can they do that? Is it completely safe for 1.8?

I am using translation, sorry.

[NEW PLUGIN] Bonus Plus

Mon, 06 Aug 2018 14:10:20 +0000

Dear all,

I am referring to this post: http://www.question2answer.org/qa/65788/bonus-points-needs-some-improvements

I have coded on q2a 1.7.5 and it seems everything goes well. You also test it and share your comments. Suggestions are welcome.

https://github.com/ihlassovbetov/q2a-bonusplus-gyzgyn

Bonus Points needs some improvements

Wed, 01 Aug 2018 08:24:27 +0000

As you aware admins can give bonus points directly from user-profile page in frontend. However, each given bonus points are not recorded, instead it is overriden. This should be improved. It is not the proper way.

Suppose that admin decides to give +50 points to a user via bonus points field. After a while admins again gives +75 points who a reason to the same user. In such a case admin should override previous given score and should consider it, so admins should give 75+50 points. After a time this working approach becomes very complicated. The admin cannot give when the first time bonus was given.

In this respect, I believe this should be improved by core hack or at least by plugin.

How to let moderators assign bonus points to users?

Sun, 18 Feb 2018 09:04:40 +0000

In /qa-include/pages/user-profile.php you see that bonus points can only be assigned by admins. q2a 1.8.0

There is no option under /admin/permissions to change this, yet.

The hack you need so that moderators can assign bonus points:

1. Open /qa-include/pages/user-profile.php
2. Find line:
if ($loginlevel >= QA_USER_LEVEL_ADMIN && qa_clicked('dosetbonus')) {
3. Change it to:
if ($loginlevel >= QA_USER_LEVEL_MODERATOR && qa_clicked('dosetbonus')) {
4. Find line:
if ($loginlevel >= QA_USER_LEVEL_ADMIN) {
5. Change it to:
if ($loginlevel >= QA_USER_LEVEL_MODERATOR) {
6. Upload file to your server.

Now it works.

It would be great if the core could integrate such a permission.

Note: If you have plugins that change the user profile, make sure to reflect those changes there too.

How to reposition the field location in user page profile.

Fri, 19 Sep 2014 10:40:34 +0000

Hi. I am trying for hours to find out how to change the position of field location in the user profile page. I want to move it exactly in the right of user avatar image and add a illtle mapmarker icon in the front.

In qa-theme there isnt any class for this and i really cant understand how to do this !!!!!!!! :( i will be grateful if you can share some instructions or how to !

Can someone with more experience help me?

Many many thanks to all of you.

my q2a page displays php files

Mon, 28 Jul 2014 16:24:28 +0000

when I go to mypageurl.com/qa-include/ i can see the all files on web browser , my q2a page was hacked I think because of this , folders permissions are 755 , and files 644 is it true?

How to restrict users from using names as admin1, administrator,administrator1 etc?

Fri, 21 Mar 2014 04:35:13 +0000

mod_security and Question 2 Answer

Wed, 05 Mar 2014 14:18:15 +0000

Yesterday I came with a problem. I was not able to post some code and I was getting an error.

"Unexpected response from server - please try again or switch off Javascript.”

After digging and digging into the problem and mod_security rules I tweaked them to let my site accept that. Of course leaving my site open to attacks, have daily backups and restore everything in case I got hacked, its not a good solution.

I see its a very common complaint here and its something that really needs to be fixed.

Anyone that knows about this and can share something deeper ?

Thanks.

Is there a way to show seperate negative and positive counts for every question ?

Wed, 29 Jan 2014 07:36:33 +0000

If user "A" voted +1 and "B" voted -1, the counter will print 0 like no one voted ..
I would like to know if the counter can display "+1" and "-1" in the vote square .
Thanks in advance .

Output user location in users ranking page

Sat, 25 Jan 2014 19:06:30 +0000

I am trying in vain to add user location ( custom field) below name on users page to the following code from "qa-page-users.php"

if (count($users)) {

foreach ($users as $userid => $user)

$qa_content['ranking']['items'][]=array(

'label' =>

(QA_FINAL_EXTERNAL_USERS

? qa_get_external_avatar_html($user['userid'], qa_opt('avatar_users_size'), true)

: qa_get_user_avatar_html($user['flags'], $user['email'], $user['handle'],

$user['avatarblobid'], $user['avatarwidth'], $user['avatarheight'], qa_opt('avatar_users_size'), true)

),

'score' => qa_html(number_format($user['points'])),

'name'=> $usershtml[$user['userid']],

'title' => qa_get_points_title_html($user['points'], qa_get_points_to_titles()),

'location'=> qa_html($user['title']['location']),

);

i have tried to add the line above ( red color) but didn't work it keeps showing me undefined variable error. should i retrieve custom user fields differently ? what am i doing wrong ?

Thousand thanks !

Trojan-Infected q2a sites?

Tue, 09 Jul 2013 17:58:58 +0000

I checked some q2a sites from the directory. When I surfed to http://mathhomeworkanswers.org (which seems to be the most famous site, #1) I got Avast Antivirus telling me "Trojan horse blocked" with these details:

URL: http://mathhomeworkanswers.org/61913/wha...

Process: C:\Users\AppData\Local\G...

Infection: JS:Iframe-CSU [Trj]

Can somebody confirm? And is this a false positive? Or did somebody hack this site?

Core hack: Language Changer

Thu, 30 May 2013 06:26:05 +0000

I hacked Q2A core so that user could choose language freely. If language was chosen by account page, parts of page are displayed in specified language. Our main navigation is in the left side bar. Below pictures are sample of each language. When V1.5 language files was applied to Q2A V1.6dev, error displayed with some languages. Those languages were excepted.

As reference information of 1.6 released soon ...

Tip: Core Hack to output userid in user profile page (only admin)

Sun, 12 May 2013 06:59:24 +0000

1. open qa-page-user.php (from v1.6.3 it is file: qa-page-user-profile.php)

2. After line:

            qa_lang_sub($favorite ? 'main/remove_x_favorites' : 'users/add_user_x_favorites', $handle));

Insert:

    // output userid on user profile page
    $userIdOutput = '';
    if($loginlevel>=QA_USER_LEVEL_ADMIN) {
        $userIdOutput = ' → UserID: '.$userid;
    }

3. Then change line:

   'label' => qa_lang_html('users/member_type'),

to:

    'label' => qa_lang_html('users/member_type').$userIdOutput,

4. Check and go to any of your user-profiles. You need to be admin!

New Plugin: Plugin Order (required core hack)

Sat, 11 May 2013 22:52:33 +0000

This plugin(required core hack) changes plugin execution order.

Plugins is executed in order of plugin folder name under qa-plugin. There is a case where you would like to change this order depending on the processing of plugin. These needs grow in the environment which has installed many plugin which changes layer or CSS, JS especially. Since user of this plugin is probably power user, the person who began to use Q2A does not need to use this plugin.

Download Plugin

I hope to be equipped by the following Q2A version up.

Best regards.

How to insert hack "edit time" in qa-page-question-view.php?

Sat, 13 Apr 2013 06:40:51 +0000

I can not make this hack.

Where to insert this code? line numbers?

Can you help me?

Update Hack: Extra User Field (V1.4)

Sun, 31 Mar 2013 23:35:34 +0000

This code adds check-box and selection-box(drop-down) and radio-button(V1.1) to custom user field by hacking core program. Refer to readme in download-file for detailed usage.

View

Screen shot 1: Add check-box
Screen shot 2: Add selection-box
Screen shot 3: Add raio-button
Screen shot 4: user detail view (before setting)
Screen shot 5: account setting view
Screen shot 6: user detail view (after setting)
Screen shot 7: @EVAL option (select/radio) V1.2~

Compatibility

1.5.x, 1.6.x, 1.7 (2014/12/22 Updated)

Update history

[2014/12/22 (V1.4)] Support V1.7
[2014/01/16 (V1.3)] modify for Q2A V1.6.2 (Thanks jaxila)

Download

Best regards

Core Hack: Display widgets on page which page-module(plugin) generated

Wed, 27 Feb 2013 22:26:20 +0000

At Q2A V1.5.X/V1.6dev, widgets don't display(can't control) in pages which module(plugin) generated.

[Core hack for displaying]

Comment out qa-include/qa-page-admin-widgets.php (L112)

//if (!($page['flags']&QA_PAGE_FLAGS_EXTERNAL))

Replace qa-include/qa-page-default.php (L68)

//if ( isset($custompage) && !($custompage['flags']&QA_PAGE_FLAGS_EXTERNAL) ) {

if ( isset($custompage) ) {

Replace qa-include/qa-page-default.php (L79)

[from]

if ($level>=QA_USER_LEVEL_ADMIN) {

[to]

if ( (!$explicitqa) && $countslugs && !isset($categoryid) ) {

$pagemodules=qa_load_modules_with('page', 'match_request');

$request=qa_request();

foreach ($pagemodules as $pagemodule)

if ($pagemodule->match_request($request)) {

qa_set_template('plugin');

$widgets = $qa_content['widgets'];

$qa_content = $pagemodule->process_request($request);

$qa_content['widgets'] = $widgets;

}

if ($level>=QA_USER_LEVEL_ADMIN) {

Where to find all function list?

Mon, 26 Dec 2011 02:01:24 +0000

I am looking for some hack to add some extra css classes. Can anyone know me how to find function like for content and question list also how to add extra css classes to thos section e.g. <div class="extra class"> (not with extra div but into existing div)

Adding links to plugin forms on admin and executing PHP code (another plugin)?

Thu, 18 Aug 2011 14:16:56 +0000

It would be nice (because I'm lazy) to have links at the top of the admin/plugins page that link to each plugin. This is because I now have 16 boxes, including the mammoth badge box. It's a bit of a chore to find the right box, so I hacked it to give me links at the top:

But of course this could be better integrated with the existing "Installed plugins" box. Gideon, have you started your 1.5 list yet? :)

The plugin is here:

https://github.com/NoahY/q2a-admin-plus

It also adds a simple box for executing php code from the admin screen. I used this to transfer an entire askbot forum... simple but powerful :) Also good for debugging.