Deceptor
12-26-2008, 10:00 PM
vB Dummy ACP
This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.
Features
Acts just like real admincp login
Can automatically defend against detection (explained below)
Won't even allow real admin logins
Easily create as many dummy acps as you like
Will work without plugins enabled (partially)
Defense Against Detection
In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:
1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.
2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:
1. The login provided is actually wrong
2. The login provided is real, but an administration login
Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.
This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.
Features
Acts just like real admincp login
Can automatically defend against detection (explained below)
Won't even allow real admin logins
Easily create as many dummy acps as you like
Will work without plugins enabled (partially)
Defense Against Detection
In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:
1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.
2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:
1. The login provided is actually wrong
2. The login provided is real, but an administration login
Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.