View Full Version : Administrative and Maintenance Tools - Multiple Account Registration Prevention
randominity
09-18-2006, 10:00 PM
*Note* This requires the Multiple Account Login Detector (AE Detector) (https://vborg.vbsupport.ru/showthread.php?t=125871) in order to function. Big thanks to MPDev for the AE Detector hack, I have used/modified his code for use in parts of this mod (with permission).
*Note 2* My forum's servers are driving me nuts right now, big load times, etc and I'm about to cut myself from waiting for a page to load - so I haven't thoroughly tested all the new goodies I've added. If you find that something doesn't work please let me know.
Description
When an user registers, this plugin checks for the cookie that the AE Detector sets, if it exists, then this plugin will move the user to a specified usergroup (default is to the (COPPA) Users Awaiting Moderation usergroup). This will now check the user's IP address upon registration, and if it matches any others, it will place them in the Multiple Account (MA) usergroup . Also you have the option to ban the new account if the old account was banned.
You can turn the new features on/off accordingly in the settings area.
Install / Upgrade
Download the attached XML file, and import it at
Admin Control Panel > Plugins & Products > Manage Products > Add/Import Product
Remember to "Allow Overwrite" if you are upgrading.
Mod Info
1 - Query
3 - Phrases
2 - Plugins
0 - Template
0 - Template Edits
v1.0.2
Fixed some major bugs that made the last release basically useless.
v1.0.1
There is now an option prevent account registrations based on IP addresses.
If a banned user attempts to create a new account, the new account will automatically be banned.
Multiple account registrations will now send a PM or make a thread
v1.0.0
Initial beta release
Please click "Install" if you have installed this mod! Thanks!
FleaBag
09-19-2006, 06:12 PM
Nice hack! A lot of my users are logging in from college/work, using shared computers. Would be bad for me but I can see the benefit!
randominity
09-19-2006, 06:33 PM
Keep in mind this doesn't affect the login process, just the registration. And I guess it doesn't really "prevent" registration, just sends it to a different registration process.
MPDev
09-19-2006, 06:40 PM
Nice add-on! What a great idea.
randominity
09-19-2006, 06:56 PM
Originally I had it set to "Moderate New Users" for vB, and I would have AE Detector make new threads in a forum for Multiple Accounts it found, but it got tedious having to look for 'em all.
So I finally got fed up and made this ^^
If anyone has any suggestions, I'm all ears... one thing I've noticed that would be helpful is to do the AE Detection process at the same hook as this plugin. For example, since I have AE Detector make a new thread; if a user tries to register, make a new thread saying "userx has tried to register account: usery" or something.
DementedMindz
09-19-2006, 07:53 PM
randominity great addon just a quick question say I move them to banned usergroup, will it only move the name just registering or both names that match?
Peter_Rosado
09-19-2006, 07:59 PM
I guess this doesn't work in 3.5.5 right? :(
randominity
09-19-2006, 08:16 PM
randominity great addon just a quick question say I move them to banned usergroup, will it only move the name just registering or both names that match?
just the name registering.
and I will post a 3.5.x version of the script in a little bit.
Snake
09-20-2006, 09:03 AM
Excellent! I thank you for making this. :)
Nathan2006
09-20-2006, 05:45 PM
Im going to try this :)
Thank you randominity
Install
Quarterbore
09-20-2006, 05:57 PM
I had a major problem with the original hack as I did a site upgrade using Impex and MOST of my member's userid shifted. So, using this, I should be able to prevent these members from registereing unless they are clever enough to clear the cookies in their browser or register from a second PC that they had not previously logged in from...
I'll have to try it!
Works great even with my issues with duplicate IDs...
The only addition I would like to see is an option to send a PM or start a new thread when a member tries to join that was flagged as already as being a member with the other member ID info... The way this works the members is put in the moderated list but there is no easy way to know it is there or why.
Quarterbore
09-20-2006, 07:33 PM
Woot... It works Now!!! I really needed this... I will leave it between the two coders that made the hacks to decide who deserves the credit as I just slapped the two pieces together....
//if the cookie exists then we know that the user already has an account
if (isset($_COOKIE['IDstack']) && $vbulletin->options['marpon'])
{
//set the usergroup to the one specified in options, or Users Awaiting Moderation
$userdata->set('usergroupid', $vbulletin->options['marpusergroup']);
//Update their ID stack and PM or Post to thread
$idstack = $_COOKIE['IDstack'];
$idstack .= ",{$vbulletin->userinfo['userid']},";
setcookie("IDstack", $idstack, time()+10368000, "/");
$Unums = split(",", $idstack);
$andids = null;
$numvs = 0;
for ($i = 0; $i < (sizeof($Unums)); $i++)
{
if( verify_id('user', $Unums[$i], FALSE, -1, -1) )
{
if (!empty($Unums[$i]) && is_numeric($Unums[$i])) {
$checkuser = $vbulletin->db->query_first("SELECT username FROM " . TABLE_PREFIX . "user WHERE userid={$Unums[$i]}");
if ( !empty($andids) ) $andids .= "and";
$andids .= " ". $checkuser['username'] ." (. $vbulletin->options['bburl'] ."/member.php?u=" . $Unums[$i] . ) ";
$numvs++;
}
}
}
$allowsmilie = '1';
$visible = '1';
//$message = construct_phrase($vbphrase['multiplelogin_alert'], htmlspecialchars_uni($vbulletin->userinfo['username']), $andids);
$message = htmlspecialchars_uni($vbulletin->userinfo['username']) . " seems to be registering a multiple personality using $andids sharing the same computer.";
// get admin users
$adminusers = split(",", $vbulletin->options['ae_adminusers']);
$fromuser = fetch_userinfo($vbulletin->options['ae_sender']);
$subject = $vbulletin->userinfo['username'] . " opened another account";
// create the DM to do error checking and insert the new PM (needs to be here)
$pmdm =& datamanager_init('PM', $vbulletin, ERRTYPE_SILENT);
$ipaddress = $vbulletin->config['ae_adminip'];
if($vbulletin->options['ae_sendpm'] == '1')
{
$pmdm->set('fromuserid', $fromuser['userid']);
$pmdm->set('fromusername', $fromuser['username']);
$pmdm->set_info('reciept', false);
$pmdm->set_info('savecopy', false);
$pmdm->set('title', $subject);
$pmdm->set('message', $message);
$pmdm->set_recipients($vbulletin->options['ae_recipients'], $fromuser['permissions']);
$pmdm->set('dateline', TIMENOW);
$pmdm->save();
}
if($vbulletin->options['ae_startthread'] == '1' AND $vbulletin->options['ae_forumid'])
{
require_once(DIR . '/includes/class_dm_threadpost.php');
// setup variables
$forumid = $vbulletin->options['ae_forumid'];
$threaddm = new vB_DataManager_Thread_FirstPost($vbulletin, ERRTYPE_STANDARD);
// insert thread
$threaddm->do_set('forumid', $forumid);
$threaddm->do_set('userid', $fromuser['userid']);
$threaddm->do_set('username', $fromuser['username']);
$threaddm->do_set('pagetext', $message);
$threaddm->do_set('title', $subject);
$threaddm->do_set('allowsmilie', $allowsmilie);
$threaddm->do_set('visible', $visible);
$tid = $threaddm->save();
require_once(DIR . '/includes/functions_databuild.php');
build_forum_counters($forumid);
}
}
If this was wrong of me to post the code here with the code from the original AE detector mod, send me a PM and I will remove it...
randominity
09-21-2006, 12:19 AM
I was gonna do the same thing, just had to study for exams this week ~~
Quarterbore
09-21-2006, 01:22 AM
This fixed all my problems...
Now, I need to remove the code from the original hack that posts when they login as with almost 2000-members and about 1500 that have a new userid I got real tired of all the false hits... Now, I get a report when the new account is started and NOT when userids shift because of a site upgrade...
I have tested this quite a bit on my site (my hybrid of the two hacks) and it seems stable on my site and it would report as few as two or as many as I care to create! Simply awsome... Thanks!
DementedMindz
09-21-2006, 09:37 AM
strange I had ae go off this morning yet it didnt move the new account into banned usergroup.
viyanali
09-21-2006, 03:55 PM
really nice work. think evreyone who uses ae is searching for something like that.
Now my questions:)
is it possible that may a banned user will be put automaticly in the banned group? and a second suggestion(question) the automatic thread creation only works when the user logs out and logs in again. thats a problem because when i have to moderate the user i have to know wich usernames he/she had before. could be there a option to list all usernames from AE like the ipinfo hack.(without searching the threads:)
I think these two options would make this hacks perfect.:)
Quarterbore
09-21-2006, 07:05 PM
really nice work. think evreyone who uses ae is searching for something like that.
Now my questions:)
is it possible that may a banned user will be put automaticly in the banned group? and a second suggestion(question) the automatic thread creation only works when the user logs out and logs in again. thats a problem because when i have to moderate the user i have to know wich usernames he/she had before. could be there a option to list all usernames from AE like the ipinfo hack.(without searching the threads:)
I think these two options would make this hacks perfect.:)
The code I posted takes care of the second part... When a person registeres that already has the cookie on their machine they cause the generation of a new thread or PM (I did not test the PM as I have that disabled on my site) and the new thread lists all the accounts that person has.
As for the first question, that is a tougher issue... The cookie does contain an array of userids that the user had logged in with so I guess you could run the values in there against the banned usergroup. If you get a match then you could ban the new userid.. Personally, as long as they can't post they can't do my site too much harm so I am not going to code that myself...
viyanali
09-22-2006, 12:56 PM
hmm thx:) that was what i needed..
The only thing is that there is a little bug. Because u hook the registration process location u get for a evrey multiple account registration try a thread wich means when somebody writes the informations and hits register and cant couse of for example wrong image verfication u get a thread opened. If then the user decided not to register u have a wrong thread.. and a second one is if the user trys to register and again for example he hits registration button 3 times couse he wrote always the code false u will get 3 threads and so on. I still use the code u sended but i made a new plugin with that code wich hooks the register_addmember_complete location. So its working without bugs now:)
murrtex
09-26-2006, 12:45 PM
when I use firefox I can register from the other browsers..why??
randominity
09-28-2006, 04:47 PM
when I use firefox I can register from the other browsers..why??
because it is cookie based, each browser's cookies are different.
Tom1234
09-28-2006, 05:19 PM
randominity,
How about incorporating Quarterbore's code (with viyanali's fix to hook the register_addmember_complete location instead) into a new release so we can properly have it post a new thread when the detector is tripped upon registration?
randominity
09-28-2006, 05:31 PM
I'm working on this (plus more) as we speak :)
randominity
09-28-2006, 09:40 PM
Again, I hate not being able to test all the features, but when I try to refresh a forum I just get a stupid file download dialog and the page refuses to load.
Hopefully everything works, but we all know how coding is :p
Tom1234
09-29-2006, 06:57 AM
Again, I hate not being able to test all the features, but when I try to refresh a forum I just get a stupid file download dialog and the page refuses to load.
Hopefully everything works, but we all know how coding is :p
Ummm... are you saying that you have just released a new version here but it's not well tested?
Tom1234
09-29-2006, 07:06 AM
I see you have added the following:
* There is now an option prevent account registrations based on IP addresses.
Isn't that capability already built into vBulletin?
* If a banned user attempts to create a new account, the new account will automatically be banned.
Is this configurable? That may not be desirable in the event that a shared computer (such as library) and web browser is used by both a banned user and legit new registrations.
* Multiple account registrations will now send a PM or make a thread
Great. Thanks.
randominity
09-29-2006, 01:20 PM
I see you have added the following:
* There is now an option prevent account registrations based on IP addresses.
Isn't that capability already built into vBulletin?
I mean that it looks up the users IP address to see if there is already an account registered with the same IP.
* If a banned user attempts to create a new account, the new account will automatically be banned.
Is this configurable? That may not be desirable in the event that a shared computer (such as library) and web browser is used by both a banned user and legit new registrations.
Yes, all the new features are configurable.
h_kakashi
09-29-2006, 02:53 PM
Great Idea and hack :)
DementedMindz
09-29-2006, 05:25 PM
Just wondering why doesnt it change the user title if they are moved to banned usergroup? They get banned but there title stays as a regular member.
murrtex
09-29-2006, 08:09 PM
sorry randominity it dosent work on me..I think it could be check IP..it would be better ;)
nevermind thanks
CSS59
09-29-2006, 10:37 PM
thank you, this will help me a lot
DementedMindz
09-29-2006, 11:23 PM
WOW this banned every new member who signed up today
(only since the new update last version worked great). I tried making a name from my girls house which it wouldnt even know my name or ip and it banned it too.
Nathan2006
09-30-2006, 12:36 AM
After I installed this a few days of new members and them not posting I sat and wondered what was wrong.
So I had a look around and found all members were placed into email confirm and that was after they had all confirmed there email addresses.
So sorry I had to remove it and all my new members are posting as soon as they have signed up :)
I will still keep an eye on this thread tho ;)
DementedMindz
09-30-2006, 02:13 AM
yeah mine would have done the same thing but I move mine to banned I got home with alot of emails asking why they were banned
EasyTarget
09-30-2006, 03:31 PM
can you make it so that if it finds the cookie on the machine and the users userid isn't one of the exceptions then it moves them to a usergroup that we specify or just gives them a new error message like "Multiple accounts are disabled. If you are sharing a computer with someone and would like your own account please contact a staff member."
randominity
09-30-2006, 03:35 PM
can you make it so that if it finds the cookie on the machine and the users userid isn't one of the exceptions then it moves them to a usergroup that we specify or just gives them a new error message like "Multiple accounts are disabled. If you are sharing a computer with someone and would like your own account please contact a staff member."
o.O that's currently what it does (minus the error message).
working on a fix atm... just gotta test the autoban feature.
EasyTarget
09-30-2006, 07:29 PM
sorry, I thought it was ip based. Its uses both I take it.
What about a page like banlist but it shows all users with multiple accounts or whatever? A very useful hack but I really don't want pm's or threads created, I'd much rather be able to see a list of names somewhere.
Peter_Rosado
09-30-2006, 09:46 PM
After I installed this a few days of new members and them not posting I sat and wondered what was wrong.
So I had a look around and found all members were placed into email confirm and that was after they had all confirmed there email addresses.
So sorry I had to remove it and all my new members are posting as soon as they have signed up :)
I will still keep an eye on this thread tho ;)
Happened to me too :hurt:
randominity
10-01-2006, 07:49 PM
sorry, all problems should be fixed now ^^
murrtex
10-01-2006, 08:12 PM
still I can register same IP and from different browsers....
randominity
10-02-2006, 03:14 AM
still I can register same IP and from different browsers....
make sure you have the option turned on to prevent registration from same IP addresses.
DementedMindz
10-06-2006, 03:58 PM
testing the new version out hopefully it dont auto ban everyone that joins up now since I move everyone with 2 accounts to banned.
randominity
10-10-2006, 02:41 AM
has anyone found anymore bugs?
DementedMindz
10-10-2006, 04:08 AM
so far so good so no Ihave not found any.
rinkrat
10-10-2006, 05:36 AM
Will it ban all aol users since they all use the same ip addresses?
randominity
10-10-2006, 01:51 PM
Will it ban all aol users since they all use the same ip addresses?
It doesn't ban users, if they try to register and their IP is already connected with an account, then the account they try to register will be put in a moderation queue for you to approve.
You can turn this option off as well.
DementedMindz
10-10-2006, 10:16 PM
I found one bug... when you get this message.. Other users that have the same IP address are: the first username always has /member.php?u=0 which is wrong it should be there userid instead of 0 everytime.
vfxpro
10-11-2006, 04:37 PM
installed the hack and waiting to see what happens. Hopefully it'll help curb our multiple account problem.
BTW, anyone know of an easy way to clean out the ol' multiple accounts on a via searchin via IP addess. Is there an easy way to do this in vB?
oldfan
10-15-2006, 02:47 AM
just the name registering.
and I will post a 3.5.x version of the script in a little bit.
Still working on it?
oldfan
10-16-2006, 09:48 PM
Still working on it?
n/m I just upgraded thanks
randominity
10-16-2006, 09:49 PM
Still working on it?
https://vborg.vbsupport.ru/showthread.php?p=1098542#post1098542
Let me know if it installs.
DementedMindz
10-16-2006, 10:21 PM
any word on this bug? https://vborg.vbsupport.ru/showpost.php?p=1094279&postcount=46
randominity
10-17-2006, 03:49 AM
any word on this bug? https://vborg.vbsupport.ru/showpost.php?p=1094279&postcount=46
yeah for some reason I put the IP checking code before the registration completes, so the new user doesn't have a user id yet... will change it as soon as I can, but got some exams coming up, and right now I'm still recovering from the Bears game WOOO
Dennis B
10-23-2006, 10:33 PM
Great work radominity, hope that little bug is fixed as soon as you can. :)
almqdad
10-28-2006, 03:25 PM
well this work with 3.5.4 pacefully
it has more feature than the other version
If a banned user attempts to create a new account, the new account will automatically be banned.
gunitman247
11-23-2006, 08:48 PM
is there a wasy to totally cancel the registration ie
Our records show that you have already registered under the name of (username). If you have lost your password, click here. If you would like to modify your profile, click here.
richTV
12-25-2006, 09:49 PM
Hi.
I'd like to try this out alongside the AE Detector. [which my forum currently uses {vB 3.6.4}]
is this add-on currently available to us the final release?
many thanks for creating this useful tool! :)
richTV
h2ojunkie
01-05-2007, 07:20 PM
I've been testing this on my sandbox servers, and the "Automatically Ban Banned Users?" option doesn't seem to have any effect.
Whether I have that turned on or not, it still puts the new account in the COPPA group.
Maybe I'm missing something here, but it seems there is some bug in the system in regards to the banned users.
I see in the plugin code the following to ban a user:
//ban the user
if ($marpautoban)
$userdata->set('usergroupid', $vbulletin->options['marpbannedgroup']);
But, I can find no where to change the setting for what group the marpbannedgroup is. I don't even see that setting being added in the xml install file.
Nathan2006
02-02-2007, 08:06 AM
yeah for some reason I put the IP checking code before the registration completes, so the new user doesn't have a user id yet... will change it as soon as I can, but got some exams coming up, and right now I'm still recovering from the Bears game WOOO
Any fix on this?
Thanks :)
Raptor
02-03-2007, 10:29 PM
great hack thanks !
HeRmAn'S
03-24-2007, 05:15 PM
Thank you randominity and *installed*:up:;)
Bieddos
04-18-2007, 05:41 PM
cooool!
Where i can change the language? In phrases not function my translate!
tycity
06-07-2007, 05:03 AM
Installed - thanks for the great mod! :)
Bravo
06-13-2007, 10:19 AM
I've been testing this on my sandbox servers, and the "Automatically Ban Banned Users?" option doesn't seem to have any effect.
Whether I have that turned on or not, it still puts the new account in the COPPA group.
Maybe I'm missing something here, but it seems there is some bug in the system in regards to the banned users.
I see in the plugin code the following to ban a user:
//ban the user
if ($marpautoban)
$userdata->set('usergroupid', $vbulletin->options['marpbannedgroup']);
But, I can find no where to change the setting for what group the marpbannedgroup is. I don't even see that setting being added in the xml install file.
man oh man, I dont see how I missed that lol. I guess cause it's late and I've been up for like 16hours, but I had the same problem and could not figure out what was going on, I even re-did part of that plugin and nothing worked, but I read your post and checked it and lol your right that group does not exist, well I went back in and fixed it and IT WORKS!!!!!!!
@randominity im sure you know what it is, but if not I'll send you the updated code so you can update the package. or with your permission i'll call this v1.0.3 and re-add it as a Updated/Fixed MOD since your last visit was in May and last post on here was in Oct of 06. and i dont know if you are going to contiune to support this or not. Hopefully you read this. so PM me if you do :)
scan-pa
06-13-2007, 11:40 AM
please let us know what code to change, or please upload the fixed version.
Thanks in advanced.
MeMySelfNi
06-22-2007, 04:27 PM
which hack does this
XXXXXXX is trying to register a new account. His/her other logins are:XXXXXX2
pcoskat
06-23-2007, 05:53 PM
Installed - thanks for the great mod! :)
This mod is one of my FAVS!
Bravo
06-24-2007, 10:40 AM
which hack does this
This one does
NeitherSparky
06-26-2007, 10:41 PM
Installed; hopefully this works...AE Multiple Login detection is a great mod, been using that forever.
@randominity im sure you know what it is, but if not I'll send you the updated code so you can update the package. or with your permission i'll call this v1.0.3 and re-add it as a Updated/Fixed MOD since your last visit was in May and last post on here was in Oct of 06. and i dont know if you are going to contiune to support this or not. Hopefully you read this. so PM me if you do :)
Wait so, what are we supposed to change?
Bravo
06-26-2007, 10:47 PM
Installed; hopefully this works...AE Multiple Login detection is a great mod, been using that forever.
Wait so, what are we supposed to change?
I havent gotten his permission yet to do so =/
not sure what to do if he never replys.
Maybe a MOD or ADMIN can advise me on the process for something like this
NeitherSparky
06-26-2007, 10:57 PM
I havent gotten his permission yet to do so =/
not sure what to do if he never replys.
Maybe a MOD or ADMIN can advise me on the process for something like this
Thanks for replying. So what exactly isn't working properly, the 'move banned users to banned group' option? They're being put in the users awaiting moderation group instead, is that right?
Bravo
06-26-2007, 11:11 PM
Thanks for replying. So what exactly isn't working properly, the 'move banned users to banned group' option? They're being put in the users awaiting moderation group instead, is that right?
Pretty much yeah
oicyu8chu
06-30-2007, 07:19 PM
Nice, cause my first victim today. :)
Choo
hubix
08-21-2007, 07:40 AM
Hello,
did anyone fixed this banned user problem?
I've tried it myself, but it didn't work.
yes, I'm also eager for the updated version where automatic banning of re-registering banned members actually work
Veronica Vain
09-03-2007, 10:07 PM
Love the Hack Thanks again!
blackvborg
09-16-2007, 09:07 PM
does it work with vb 3.6.8?
Thank you!
CoryNickerson
10-20-2007, 10:47 PM
this worked once for me but hasnt worked again since. o.O vb 3.6.8
its letting multiple account memebers with the same IP adresses register multiple accounts and doesnt place them in the group i specified... help please? thanks
aquariumpros
10-23-2007, 06:09 AM
another useless VB hack... im running 3.6.8 - i uploaded both xml files, and it let me
sign right on up, even though my IP is identical to my admin account, let me right on in..
are there any other methods on detecting multiple account signups?
WOW - love how people like you insult those who are trying to help out the community for FREE.
Seriously - why don't you just go write your own code if you're just going to insult the authors who are at least trying.
And while you're at it; you might want to learn how to read too:
"https://vborg.vbsupport.ru/external/2011/01/24.gif Is in Beta Stage"
aquariumpros
10-23-2007, 06:25 AM
Lets see here... Last Update: 01 Oct 2006
yea, im sure hes on the case....
its also just lovely for coders to create this stuff, then drop it...
yea, just great, this guy doesnt care about you, me, this hack
or anything. I see coders make good stuff then disappear all the time.
Exactly.
He/she owes you nothing.
So don't use it.
(BTW - with a few tiny modifications it works great)
onehost
10-23-2007, 08:15 AM
then why dont you post an update.
richTV
10-28-2007, 02:20 AM
been using this add-on for a while and it's working fine under 3.6.8, tnx!
Because this add-on is connected with the AE Multiple Log-in detector, the threads for the Multiple Account Registration Prevention are placed in the same forum as the AE detector.
would it be possible to have an option in the Admin Panel to output the Multiple Account Registration Prevention in a different forum or subforum of my choosing?
TIA :)
AngelBlue
12-10-2007, 11:04 PM
Could this be updated to exclude AOL users from IP checks? I'm getting quite a few false positives from them.
mystic10
01-10-2008, 09:42 PM
This Is A Silly Question I Know But HOW Do I Check Which Id Had The Same Ip That Way I Can Check It..please Guide..THANKS IN ADVANCE..ITS AWESOME...I JUST LACK THE KNOWLEDGE OF USING IT PROPERLY SO SIR OR MAM IF U CAN HELP IT WOULD BE MOSTLY APPRECIATED
rwoscott
01-15-2008, 12:21 AM
(BTW - with a few tiny modifications it works great)What tiny mods did you make?
It appears that my new reg's aren't being auto banned.
T4doom
01-22-2008, 09:11 AM
Very nice mod. I've been having allot of trouble with a certain user constantly ban evading using proxies. Thanks allot for this.
Oh, and for the record, I was the #1337 person to download this mod ^.^
AngelBlue
02-15-2008, 11:38 PM
I was getting a lot of false positives from proxy.aol.com users who were registering on my forum, so I modded the code a bit.
The attached version of the code includes a new config option (defaulting to proxy.aol.com) which ignores IP matches from users registering with that hostname/domain. This is a good compromise if you're not comfortable asking AOL users to disable the proxy (https://vborg.vbsupport.ru/showthread.php?t=170616).
Konstantinos
03-03-2008, 07:57 PM
Thanks for replying. So what exactly isn't working properly, the 'move banned users to banned group' option? They're being put in the users awaiting moderation group instead, is that right?
same here
pcoskat
03-31-2008, 02:31 PM
Any chance of getting this for 3.7 with one modification:
Instead of sending a PM, my preference would be to create a new thread in a designated forum. Possible?
Thanks!
masterross
04-08-2008, 05:06 PM
hmmm
ok it detects cookies and IP
but users can just logout or user IE and FF for example
and what about users that came from proxies ?
scan-pa
04-08-2008, 05:20 PM
The first half of this program: Multiple Account Login Detector (AE Detector) (https://vborg.vbsupport.ru/showthread.php?t=125871) sets a special cookie that is not deleted on logout and is stored in another section of the PC then the normal cookies are. And the cool thing is this cookie does not get deleted when the user deletes all of the browser cookies, as it is outside the standard cookie folder location.
They can switch browsers all they want. makes no difference.
as for proxies, there is a mod on this site that prevents proxy site use, and allows AOL and dial up users to still gain access. There is also the 2 IP info and Proxy to IP mods that will help with that issue.
There are so many mods available for vB that will help you prevent over 99.5% of user dupe accounts it's not even funny.
Why these features are not standard along with a standard Admin selected Real First and Last name profile fields just kills me.
I have all of these security mods and more and they all work great.
NeitherSparky
04-23-2008, 02:33 AM
I just needed to post...we have a troll who just won't go away (he registered his 10th account a few minutes ago) and this add-on to the original mod has been wonderful. He is using AOL proxies about half the time to register and this mod catches him if he happens to use the same one he's used before (yes some legit users are coming up on the list when he registers, and yes some innocent new members may get caught, but I'm willing to take that risk; at least the accounts are frozen until I can get online and investigate. The guy is very easy to spot by his email addies and often his usernames).
So anyways, this mod is great. :) Although as stated before, the guy isn't being put in the banned group, he's always going into the users awaiting moderation group. I can live with that and all, but as is the option to move them to the banned group is basically useless.
Found a bug:
if your includes/config.php has its db type set to mysqli, it breaks registration, e.g:
$config['Database']['dbtype'] = 'mysqli';
To fix it, you need to update the register_addmember_process under Manage Products to the following:
//if the cookie exists then we know that the user already has an account
if (isset($_COOKIE['IDstack']) && $vbulletin->options['marpon'])
{
//set the usergroup to the one specified in options, or Users Awaiting Moderation
$userdata->set('usergroupid', $vbulletin->options['marpusergroup']);
//Automatic banning of previously banned users
if ($vbulletin->options['marpautobanon'] && $vbulletin->options['marpbannedgroup'])
{
$marpautoban = FALSE;
if($idstack = explode(',',$_COOKIE['IDstack']))
{
foreach ($idstack as $uid)
{
if (is_numeric($uid))
{
//check to see if any of the multiple users are banned
if (is_member_of(fetch_userinfo($uid), $vbulletin->options['marpbannedgroup']))
$marpautoban = TRUE;
}
}
//ban the user
if ($marpautoban)
$userdata->set('usergroupid', $vbulletin->options['marpbannedgroup']);
}
}
}
//IP based prevention
else
{
if ($vbulletin->options['marpipon'])
{
$ip = $_SERVER['REMOTE_ADDR'];
//check to see if another user exists with the same ip address
if ($multip = $vbulletin->db->query_read("SELECT userid,username,ipaddress FROM " . TABLE_PREFIX . "user WHERE ipaddress='{$ip}'"))
{
if ($vbulletin->db->num_rows($multip) > 1)
{
$userdata->set('usergroupid', $vbulletin->options['marpusergroup']);
$andids = " ". $vbulletin->userinfo['username'] ." (. $vbulletin->options['bburl'] ."/member.php?u=" . $vbulletin->userinfo['userid'] . ) ";
$andusers = $vbulletin->userinfo['username'];
while ($mip = $vbulletin->db->fetch_array($multip))
{
$andids .= ', ' . " ". $mip['username'] ." (. $vbulletin->options['bburl'] ."/member.php?u=" . $mip['userid'] . ) ";
$andusers .= ','.$mip['username'];
}
$message = construct_phrase($vbphrase['marp_ipmessage'], htmlspecialchars_uni($vbulletin->userinfo['username']), $andids, $ip);
$subject = construct_phrase($vbphrase['marp_subject'], htmlspecialchars_uni($vbulletin->userinfo['username']), $andusers, '[IP]');
// get admin users
$adminusers = split(",", $vbulletin->options['ae_adminusers']);
$fromuser = fetch_userinfo($vbulletin->options['ae_sender']);
$allowsmilie = '1';
$visible = '1';
// create the DM to do error checking and insert the new PM (needs to be here)
$pmdm =& datamanager_init('PM', $vbulletin, ERRTYPE_SILENT);
$ipaddress = $vbulletin->config['ae_adminip'];
if($vbulletin->options['ae_sendpm'] == '1')
{
$pmdm->set('fromuserid', $fromuser['userid']);
$pmdm->set('fromusername', $fromuser['username']);
$pmdm->set_info('reciept', false);
$pmdm->set_info('savecopy', false);
$pmdm->set('title', $subject);
$pmdm->set('message', $message);
$pmdm->set_recipients($vbulletin->options['ae_recipients'], $fromuser['permissions']);
$pmdm->set('dateline', TIMENOW);
$pmdm->save();
}
if($vbulletin->options['ae_startthread'] == '1' AND $vbulletin->options['ae_forumid'])
{
require_once(DIR . '/includes/class_dm_threadpost.php');
// setup variables
$forumid = $vbulletin->options['ae_forumid'];
$threaddm = new vB_DataManager_Thread_FirstPost($vbulletin, ERRTYPE_STANDARD);
// insert thread
$threaddm->do_set('forumid', $forumid);
$threaddm->do_set('userid', $fromuser['userid']);
$threaddm->do_set('username', $fromuser['username']);
$threaddm->do_set('pagetext', $message);
$threaddm->do_set('title', $subject);
$threaddm->do_set('allowsmilie', $allowsmilie);
$threaddm->do_set('visible', $visible);
$tid = $threaddm->save();
require_once(DIR . '/includes/functions_databuild.php');
build_forum_counters($forumid);
}
}
}
}
}
it is changing "mysql_num_rows($multip)" to "$vbulletin->db->num_rows($multip)"
-=Leb=-
05-15-2008, 04:46 PM
I think the time has come for a new update. most of us are using VB 3.7 :)
pcoskat
05-19-2008, 03:58 PM
I think the time has come for a new update. most of us are using VB 3.7 :)
Agreed.
Any word on whether or not this will be updated to 3.7?
mark|3
05-21-2008, 04:11 AM
will there be a 3.7 version?
thanks
randominity
05-26-2008, 05:07 AM
Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon ;)
NeitherSparky
05-27-2008, 04:30 AM
Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon ;)
Thanks man!! :)
KURTZ
05-31-2008, 09:23 AM
Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon ;)
superb, i'll waiting for this ...
peterpigman
06-09-2008, 05:29 PM
Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon ;)
???
ccunnin71
06-11-2008, 02:03 PM
Any word on an update for 3.7?
johnban
06-17-2008, 07:36 AM
Hi I installed the hack in 3.7
If I have a user that has logged in and then he is making a new registration then the hack it's catching him.
But
..
One user has registered into my forum at 16:00 (lets say) from IP address 11.111.111.111 (of course it is not the real IP). After 30 minutes he is registering again with different username/mail but from the same IP. Shouldnt be captured by the hack ??
Thanks,
John B.
Raptor
07-16-2008, 03:10 PM
not working for me on vb3.7.2 either
was fantastic on 3.6.8
ibuddy
07-20-2008, 05:58 PM
please update to 3.7!
MeMySelfNi
08-01-2008, 06:16 PM
<font face="Lucida Sans Unicode">its not working on 3.7.0</font>
please someone update it..thanks :D
mrcrx
09-06-2008, 03:30 PM
Please update!
fulviods
09-13-2008, 03:55 PM
I have this plugin on 3.7.3 and it seems to work
mrcrx
09-17-2008, 07:25 PM
I have this plugin on 3.7.3 and it seems to work
Thats intresting. I tried to run it on 3.7.0 and got all sorts of errors.
Milchi
09-18-2008, 04:38 AM
I have it on 3.7.3 PL1, works!
duditas
10-24-2008, 05:28 PM
I'm trying it and it seems to work. Marked as installed. Thanks :up:
Jah-Hools
10-30-2008, 01:46 PM
I want to keep an eye on this and will use it when it gets updated and out of beta?
Thanks!
:up:
The4um
11-17-2008, 05:15 PM
some update for this?? on 3.7 doesn't work anymore:(
Kiros72
11-23-2008, 01:35 PM
My users are getting errors during registration, except it doesn't happen in all browsers... It seems to only happen in Internet Explorer or other browsers that extend it.
First, this appears at the very top:
Warning: mysql_num_rows(): supplied argument is not a valid MySQL result resource in [path]/register.php(385) : eval()'d code on line 44
Then (probably because of the first error), this appears in the vBulletin Message box:
Unable to add cookies, header already sent.
File: /home/domain/public_html/forums/includes/class_core.php
Line: 3242
Can anyone think of a solution? I've really got no idea =[
Duncan Idaha
12-25-2008, 07:06 PM
Tried it and it only generated error messages.
AndyJensen
01-15-2009, 10:50 AM
Does this work on 3.8.0?
Jah-Hools
01-15-2009, 12:09 PM
Would be good if it did!
CORSO
01-15-2009, 09:25 PM
Since we updated to 3.8 the new users can not register in the forum and we are getting continuous errors from the database, for example this is the last one received:
Database error in vBulletin 3.8.0:
Invalid SQL:
INSERT INTO logins (userid, username, ipaddress, phpdate, logintype) VALUES (, 'marcelinno', '217.124.30.141', 1232059966, '');
MySQL Error : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ' 'marcelinno', '217.124.30.141', 1232059966, '')' at line 1
Error Number : 1064
Request Date : Thursday, January 15th 2009 @ 11:52:46 PM
Error Date : Thursday, January 15th 2009 @ 11:52:47 PM
Script : http://www.c4atreros.com/foroc4/register.php?do=addmember
Referrer : http://www.c4atreros.com/foroc4/register.php?do=register"
Kiros72
01-16-2009, 06:51 PM
I had problems with this too, so I developed a modification like it that works just fine with vBulletin 3.7 and 3.8. If you're interested, check out the link in my signature.
CORSO
01-17-2009, 09:33 AM
I have desinstaled:
Multiple Account Registration Prevention
Multiple Account Login Detector (AE Detector)
And installed your mod
Multiple Account Detection & Prevention
But the problem persists
CORSO
01-17-2009, 10:22 AM
Already I have found the problem
I have desinstaled the mod: Log Logings Hack
And the error has disappeared
Crystal Shards
06-01-2009, 04:47 PM
Can you make this so we can check version in ACP? I can't with what I have installed.
TheInsaneManiac
11-02-2009, 04:58 AM
3.8 won't send proper PMs with this modification. AE works with PMs, but this mode won't even though I still get PMs from AE lol...
I suggest going with Kiros72 (https://vborg.vbsupport.ru/member.php?u=139456)'s version (https://vborg.vbsupport.ru/showthread.php?t=199077).
Pellonpekko
06-09-2011, 03:59 PM
Does this work on vB4.1?
I need this tool
vBulletin® v3.8.12 by vBS, Copyright ©2000-2025, vBulletin Solutions Inc.