PDA

View Full Version : Administrative and Maintenance Tools - Duplicate IP Report by BOP5 (Checks for users sharing the same IP Addresses) VB3/VB4


BirdOPrey5
05-05-2012, 10:00 PM
Brought to you by BirdOPrey5
www.Qapla.com (http://www.qapla.com/mods/)

Version 2.1.2 - Fixed MySQLi bug - Introduced GOLD/Premium Version
Version 2.1 - Added BBCode to Banned Users and Post Count Options, better debug info
Version 2.0 - Added report for Registration (User) IP Address Checking

Check out the GOLD Version for these additional features (http://www.qapla.com/mods/showthread.php/521-Duplicate-IP-Report-GOLD-Recent-Registration-Check-GOLD-by-BOP5):

Run reports directly from the Admin CP anytime you want
Post daily report as a "New Post" into an existing thread rather than a "New Thread" each night
Access to another Gold Mod- Recent Registration Check- will block spammers and scammers trying to register multiple accounts from the same IP address


This mod will run a nightly scan of your "post" and/or "user" table. It will report if it finds any users sharing the same IP address. You choose in the options how many days back you want to look. (Max of 5000 days, but please use more reasonable limits.)

If any "duplicate use" is found the IP addresses, usernames and optionally the posts themselves will be reported.

See a real report: Report Demo at Qapla.com (http://www.qapla.com/mods/showthread.php/433-Duplicate-IP-Report-for-05-07-2012?p=1235#post1235)

The report takes the form of a new thread posted to the forum of the Admin's choosing (A private forum for mods or admins is strongly recommended.)

There are options for whitelisting (ignoring) specific IP Addresses and/or userids so if you or your mods post as other users you can prevent that from being reported. If you use the Zoints Anonymous Posting mod you will want to put that userid on the whitelist else the report will out whoever posted "Anonymously."

NOTE: There are PERFECTLY valid reasons 2 or more users may share the same IP address. This report in and of itself is not proof of malicious activity. Users that connect by mobile devices, work in same offices, or go to the same schools for example would likely share the same IP address on some posts. So would too any users connecting from the same home or public Wi-Fi network.

As of version 2.0 there is a report for both the "post" and "user" table. The "user" table will find when 2 or more users register with the same IP address.

Tested and working on VB 3.8.7 and VB 4.1.12/4.2.0 and should work on all 3.7 / 3.8 / 4.x versions.

------------------------------------------------------

Please "Mark as Installed" if you use this. :)
Donations always appreciated. :up:
Nominate MOTM if you LOVE it! ;)

BirdOPrey5
05-06-2012, 03:35 PM
Reserved.

ForceHSS
05-06-2012, 04:04 PM
nice installed

Nirjonadda
05-06-2012, 04:33 PM
Excellent ... Installed !

chimpmaster
05-06-2012, 04:48 PM
Very nice Mod. Installed on 4.1.11 patch 2 and works perfectly.

datoneer
05-06-2012, 05:34 PM
Thanks BOP you are the best!

vBNinja
05-07-2012, 12:11 AM
Very nice, been waiting for something like this, any chance of making it check the user table too for the registration IPs?

Thanks :)

BirdOPrey5
05-07-2012, 01:08 AM
I suppose checking the user table would be possible where it could report duplicates but it's not dynamic like the posts table. Once two users register with the same IP they would always show up in the report. I suppose I could limit the report to maybe the last x number days of registrations but it should be longer than the post check.

I will think this through a little better and figure out if it is practical to include a registration ip check based on feedback I get from the current version. :up:

BirdOPrey5
05-07-2012, 07:47 PM
Version 2.0 Released- Now will check the User table too (For Registration IP Check.)

The first time I ran this report I saw one IP being used by 18 people I hadn't noticed. They had never made a post but when I checked their profile they had all spammed their own visitor messages with links.

Without this mod no telling how long they may have lasted.

You will need to do a full install - that is upload the new php file AND import the product xml file, overwriting each, if upgrading.

chimpmaster
05-07-2012, 08:15 PM
Excellent addition. V2.0 found a spammer with 4 user id's on my forum that the first version didn't detect. Thanks BOP. If they spam via PM and never post this will find 'em.

Papa Bear
05-07-2012, 11:00 PM
Excellent..Installed..

Sforums
05-08-2012, 03:01 AM
Nominated, fantastic stuff. Thank you BOP!

sweetpotato
05-08-2012, 06:02 AM
What this Mod different from Mod Multiple account login detector (AE Detector) (https://vborg.vbsupport.ru/showthread.php?t=183268)?
Thanks,

New Joe
05-08-2012, 06:50 AM
What this Mod different from Mod Multiple account login detector (AE Detector) (https://vborg.vbsupport.ru/showthread.php?t=183268)?
Thanks,

That one is for vB Version: 3.7.1
Some say it works on vB 4 some say it doesn't.
That one isn't supported, this one is, by a Moderator of vB org as well.

I actually use another old version for such as this, and it works fine, but in the future I will start to use this one

sweetpotato
05-08-2012, 07:36 AM
That one is for vB Version: 3.7.1
Some say it works on vB 4 some say it doesn't.

That working fine for me on VB 4.12. However, I will try BOP5 Mod.

Skyrider
05-08-2012, 11:10 AM
That one is for vB Version: 3.7.1
Some say it works on vB 4 some say it doesn't.
That one isn't supported, this one is, by a Moderator of vB org as well.

I actually use another old version for such as this, and it works fine, but in the future I will start to use this one
Isn't that one Cookie based, and this one IP based?

Also, installed!

BirdOPrey5
05-08-2012, 12:10 PM
What this Mod different from Mod Multiple account login detector (AE Detector) (https://vborg.vbsupport.ru/showthread.php?t=183268)?
Thanks,

Really apples and oranges- I use both. That mod doesn't look at IP addresses at all, it looks for a cookie that can be easily cleared by a user who knows what they are dong.

It doesn't create reports, it PMs or posts on a single detection.

One isn't better than the other- just different mods.

DonosOdD
05-08-2012, 12:48 PM
This looks yummy.

Tagged for later!

djbaxter
05-08-2012, 02:33 PM
What does this mean?

Invalid Day Back - Report Not Run.

BirdOPrey5
05-08-2012, 03:31 PM
How many "Days back" did you set for the report to run for both posts and users?

It should be a value between 0 and 5000 for both of those or else you get that error.

Nirjonadda
05-08-2012, 04:16 PM
Press this button to manually run the report not working:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

djbaxter
05-08-2012, 04:59 PM
How many "Days back" did you set for the report to run for both posts and users?

It should be a value between 0 and 5000 for both of those or else you get that error.

I left them at the defaults:

How Many Days Back To Check? (Posts) = 7
Enter the number of days of previous posts to search for this report. Set to 0 to disable this report.

How Many Days Back To Check? (Users) = 30
Enter the number of days of previous registrations to search for this report. Set to 0 to disable this report.

Records Limit = 500
This is the absolute max number of IP Addresses that will be returned in any report. Even on large forums this usually would not be a very large number, this limit is like a safety check- if your reports return anywhere near this limit there are probably bigger issues.

Note that this was a manual run. The full output says this:

Duplicate IP Report by BOP5


Dupicate IP Check Start
Post Report - Valid numdays: 7
User Report - Valid numdays: 30
No Duplicates Found - No Report Created
Invalid Day Back - Report Not Run.

Go Back

Done

Razta
05-08-2012, 11:06 PM
Thank you very much, works great with vBulletin 4.1.12 Patch Level 1 :)

BirdOPrey5
05-09-2012, 12:21 AM
Press this button to manually run the report not working:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.

What values are you setting for days back? Try setting them low- really low, like 1 and 1, and see if it works. It will give me an idea of the issue.

I left them at the defaults:

How Many Days Back To Check? (Posts) = 7
Enter the number of days of previous posts to search for this report. Set to 0 to disable this report.

How Many Days Back To Check? (Users) = 30
Enter the number of days of previous registrations to search for this report. Set to 0 to disable this report.

Records Limit = 500
This is the absolute max number of IP Addresses that will be returned in any report. Even on large forums this usually would not be a very large number, this limit is like a safety check- if your reports return anywhere near this limit there are probably bigger issues.

Note that this was a manual run. The full output says this:

Are you familiar with running manual SQL queries if I gave you a couple to run?

Thank you very much, works great with vBulletin 4.1.12 Patch Level 1 :)

Please "Mark It as Installed" :up:

djbaxter
05-09-2012, 12:57 AM
Are you familiar with running manual SQL queries if I gave you a couple to run?

Yes. Fire away.

BirdOPrey5
05-09-2012, 01:28 AM
#1)


SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, GROUP_CONCAT(DISTINCT postid) AS postid
FROM post
WHERE dateline > 1335925435 AND userid > 0 AND ipaddress != ''
GROUP BY ipaddress
HAVING COUNT(DISTINCT userid) > 1
ORDER BY COUNT(DISTINCT userid) DESC
LIMIT 500;


That is the code for the 7 day look back of the posts table. You will have to put a table prefix in front of "post" if you use them.

#2)


SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid
FROM user
WHERE joindate > 1333938235 AND userid > 0 AND ipaddress != ''
GROUP BY ipaddress
HAVING COUNT(DISTINCT userid) > 1
ORDER BY COUNT(DISTINCT userid) DESC
LIMIT 500;


That's the 30 day look back of the User table.

I'm curious if either of these produce any results (return any rows.)?

If they don't, let me know. if they do maybe you can PM me what it returns, you can edit/mess up the IP addresses for privacy if need be.

djbaxter
05-09-2012, 10:27 AM
SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, GROUP_CONCAT(DISTINCT postid) AS postid
FROM post
WHERE dateline > 1335925435 AND userid > 0 AND ipaddress != ''
GROUP BY ipaddress
HAVING COUNT(DISTINCT userid) > 1
ORDER BY COUNT(DISTINCT userid) DESC
LIMIT 500;

Result: MySQL returned an empty result set (i.e. zero rows). ( Query took 0.0026 sec )

SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid
FROM user
WHERE joindate > 1333938235 AND userid > 0 AND ipaddress != ''
GROUP BY ipaddress
HAVING COUNT(DISTINCT userid) > 1
ORDER BY COUNT(DISTINCT userid) DESC
LIMIT 500;

Result: MySQL returned an empty result set (i.e. zero rows). ( Query took 0.0030 sec )

BirdOPrey5
05-09-2012, 10:40 AM
OK. Well the good news is you don't have any duplicates in your forum.

The bad news is... I have to fix my code to deal with that situation- it was the one situation I couldn't test because I was always seeing duplicates in one or the other.

I'll probably release a fix later today. I'm confident that if you did have a duplicate the report would run as expected.

djbaxter
05-09-2012, 11:19 AM
Thanks BOP5.

RisingGlow
05-09-2012, 02:53 PM
Awesome mod! Something that I've been looking for. Many IP/multiple accounts reporting mods really only check on registering, and not posts, which is just as vital.

BirdOPrey5
05-09-2012, 05:09 PM
Thanks BOP5.

I see the only problem is that it says that "Invalid days" line, everything actually runs as expected. You're not getting a report because you have "Post empty reports" set to "No." If you set it to yes the report would run (but be empty.)

I have made the fix in my working copy but since it doesn't effect performance I'm not going to update the mod just for this minor change- it will be part of the next release. :up:

Skyrider
05-11-2012, 07:03 PM
Is there anyway that people who have been banned can be mentioned? This way, I can easily check if someone has been banned already and a duplicate user by-passed the ban (not yet banned) with another account.

And or an option that banned people can be excluded of being posted on the duplicate IP list?

And perhaps an option to show how many posts each account has within the reported thread.

BirdOPrey5
05-11-2012, 07:51 PM
As of now banned users should be showing up on the list.

Adding an option to exclude banned users sounds like a good idea, as do post counts- both should be fairly easy and I will try to get it into the next version.

Skyrider
05-12-2012, 04:12 AM
As of now banned users should be showing up on the list.
Indeed it does :), but it also shows up non-banned users. So I have to manually see which one has been banned and which one hasn't been banned. Maybe defined by a color (green = non-banned, red = banned) to easily see the difference.

Adding an option to exclude banned users sounds like a good idea, as do post counts- both should be fairly easy and I will try to get it into the next version.
Thanks :), appreciate it.

charlesr
05-12-2012, 08:19 AM
Thanks. Installed

djbaxter
05-16-2012, 11:18 AM
Typo in bop5_dupeip.php:

Line 229:

Change:

$report .= "Duplicate Resgistrations IP Report for $today, looking back $unumdays days. \r\n\r\n";

To:

$report .= "Duplicate Registrations IP Report for $today, looking back $unumdays days. \r\n\r\n";

BirdOPrey5
05-16-2012, 12:25 PM
thanx. :)

BadgerDog
05-16-2012, 01:44 PM
Intalled for testing with thanks ... :)

Is there a reason that moderators show up with duplicate IP's as some standard registered users?

Perhaps has something to do with them moderating (editing or deleting) the registered user's post, causing the moderator's IP to be added?

Regards,
Doug

BadgerDog
05-16-2012, 02:18 PM
Follow up ... :)

A great idea for a mod and in my opinion, badly needed, however, it has one caveat that everyone should be aware of, already pointed out by bop5 ... ;)

NOTE: There are PERFECTLY valid reasons 2 or more users may share the same IP address. This report in and of itself is not proof of malicious activity. Users that connect by mobile devices, work in same offices, or go to the same schools for example would likely share the same IP address on some posts. So would too any users connecting from the same home or public Wi-Fi network.

According to the output from this mod, I have a single IP address 132.3.33.68 being shared as a registration IP by 7 different users. It's absolutely correct, except the IP address is from a military base where IP addresses are rotated and assigned randomly (and re-used). All 7 members are legitimate and not spammers etc,. so one has to be careful as to how to use the information provided. ;)

It's very common for dial-up and internal networks to re-use and re-assign outbound IP addresses, so unless there's a way of ensuring that the multiple registrations (or posts) come from a specific machine, it's a bit of leap to assume too much. I also use the "cookie" based program which does run for me under 4.1.3pl5 and yes, cookies can be deleted, but I find it's been 90% plus in nailing spammers and other dysfunctional folks who have tried to register 0r re-register under different names.

I don't know if this mod could be enhanced to add "cookies" or some other method to furthe narrow the data, so good guys aren't inadvertently nailed along with bad guys .... :D

Nice work BOP5 .. appreciate your efforts ... :)

Regards,
Doug

BirdOPrey5
05-16-2012, 04:13 PM
Intalled for testing with thanks ... :)

Is there a reason that moderators show up with duplicate IP's as some standard registered users?

Perhaps has something to do with them moderating (editing or deleting) the registered user's post, causing the moderator's IP to be added?

Regards,
Doug

Doug,

In my test a moderator editing a post did not change the original IP Address assigned to the post. I checked on VB 4.1.12.

djbaxter
05-16-2012, 05:57 PM
According to the output from this mod, I have a single IP address 132.3.33.68 being shared as a registration IP by 7 different users. It's absolutely correct, except the IP address is from a military base where IP addresses are rotated and assigned randomly (and re-used). All 7 members are legitimate and not spammers etc,. so one has to be careful as to how to use the information provided. ;)

Yes. Same thing with dorms at colleges and universities, as well as AOL users and such. But it does at least draw attention to potential duplicates for further investigation.

I also use the "cookie" based program which does run for me under 4.1.3pl5 and yes, cookies can be deleted, but I find it's been 90% plus in nailing spammers and other dysfunctional folks who have tried to register 0r re-register under different names.

Ditto.

[QUOTE=BadgerDog;2329887]I don't know if this mod could be enhanced to add "cookies" or some other method to further narrow the data, so good guys aren't inadvertently nailed along with bad guys .... :D[quote]

But there are legitimate cases of people using the same computer - couples, siblings, or even friends over at one another's homes.

BadgerDog
05-16-2012, 11:28 PM
But there are legitimate cases of people using the same computer - couples, siblings, or even friends over at one another's homes.

That's true... :)

The other multiple logon program I mentioned has a field for UserID's to ignore. When I get a response from the users caught in that situation indicating they are father/son etc., I simply add their UserID's to that array and they no longer get flagged.

It has stopped them being penalized by others who attempt to "troll" our site under multiple identities, because those types don't bother to respond to the admin requests to explain the multiple login identities. :D

That type of UserID ignore would be a nice addition to this mod.... :up:

Regards,
Doug

BirdOPrey5
05-17-2012, 11:06 AM
That type of UserID ignore would be a nice addition to this mod.... :up:


It has it. It's called "User ID Whitelist" in settings. Whitelist = Ignore.

BadgerDog
05-17-2012, 10:40 PM
It has it. It's called "User ID Whitelist" in settings. Whitelist = Ignore.

Thanks ... :)

I missed that and only saw the IP whitelist ... doh! :o

Regards,
Doug

charlesr
05-18-2012, 05:24 AM
Update, this is already proving useful. Thanks again.

BirdOPrey5
05-18-2012, 12:47 PM
Updated to Version 2.1

Added an option to apply a custom bbcode (like strike out) to banned users for easy identification in reports.

Added option to show post counts next to usernames.

Also added actual queries to debug info for easier debugging.

megabink
05-18-2012, 04:01 PM
Thanks Joe,installed and nominated.

MikeF
05-21-2012, 05:01 PM
This works flawlessly in 4.2 Beta 1

Disco_Stu
05-31-2012, 03:40 PM
I installed in 4.2 and ran manually. It generated the report which looks good but did generate a few warnings. Marking as installed. Good mod!

Here are the warnings it generated:

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 126

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 259

BirdOPrey5
05-31-2012, 10:30 PM
Thanks, I check those out for the next version.

BirdOPrey5
06-01-2012, 06:02 PM
[redacted.]

AusPhotography
06-02-2012, 10:15 PM
Bug if using mysqli ... change the free results to:
$vbulletin->db->free_result($aillps);

BirdOPrey5
06-03-2012, 02:17 AM
Thanks for the tip, it will be in the next update.

DAMINK
06-05-2012, 01:00 AM
What a great mod BOP5! seriously this is great. Rated and voted.
Just ran this and got this result.

[replacer_a] - Used by 18 users.

Not worried about the duplicates. Shows the mod is working well :)
The [replacer_a] i get ?????

Thunderbird8
06-05-2012, 07:37 AM
I think I made one of my fellow administrators drool when I asked for opinions on whether or not to install this ;).

Filling in the user whitelist for the size of ours is gonna be a royal pain though...

BirdOPrey5
06-05-2012, 01:23 PM
What a great mod BOP5! seriously this is great. Rated and voted.
Just ran this and got this result.

[replacer_a] - Used by 18 users.

Not worried about the duplicates. Shows the mod is working well :)
The [replacer_a] i get ?????

I don't understand the question?

I assume it shows a real IP address and not "[replacer_a]" ?

DAMINK
06-05-2012, 10:00 PM
No it doesnt BOP5.
It literally shows [replacer_a] instead of the ip address.
But its not a big deal. It still works just fine.
Here is a screener, and i know i did a year back which is silly but i had to to get some duplicates as i removed the recent ones.

http://www.ftw.net.au/fileuploads3/13389371611590_for-BOP5.png

BirdOPrey5
06-06-2012, 09:23 AM
Do you have some mod that has changed the IP addresses stored in the IP Address column of the user table?

The only way I could see this happening is if you viewed your user table via phpmyadmin (or whatever) and saw [replacer_a] as an actual value of several users's IP addresses.

"[replacer_a]" isn't code that is used in this mod at all.

DAMINK
06-06-2012, 09:32 AM
Yep i do actually have a mod for Country flags that might be the cause.
I will investigate this further and let you know thanks BOP5.

ceho
06-09-2012, 10:55 AM
Hi, what a great mod, something I have been looking for since ages :). Thanks a lot!

Thunderbird8
06-13-2012, 11:15 AM
Something that just came to mind, I don't think social groups or visitor messages are currently checked for duplicates, though I don't know how much it'd be needed with the registration IP check already in place.

BirdOPrey5
06-14-2012, 10:22 AM
Yeah I don't expect they will be added anytime soon either. Looking at the database tables the IP addresses in those sections are stored in a different format then posts and user table.

I don't feel it is that much of an issue.

liamwli
06-17-2012, 08:04 AM
Installled :)

But I get a mysql warning when I click the 'Run Now' button....

ceho
06-17-2012, 12:27 PM
Would it be possible to add new reports to one thread as a new post instead of having a new thread for each report :)? Great mod by the way. Gave me a lot of important information!

BirdOPrey5
06-17-2012, 01:30 PM
Installled :)

But I get a mysql warning when I click the 'Run Now' button....

I would need to see a copy of the warning to attempt to fix the problem.

Would it be possible to add new reports to one thread as a new post instead of having a new thread for each report :)? Great mod by the way. Gave me a lot of important information!

It's something I will try to add to a future version. ;)

liamwli
06-18-2012, 04:43 AM
I would need to see a copy of the warning to attempt to fix the problem.



xxx

Attatched via image as well:

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 126

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 259

AusPhotography
06-18-2012, 08:22 AM
Known problem https://vborg.vbsupport.ru/showpost.php?p=2335959&postcount=52

BirdOPrey5
06-18-2012, 12:55 PM
Yes, that bug will be fixed in the next release. In the mean time it does not stop the mod from functioning.

liamwli
06-21-2012, 09:51 AM
Yes, that bug will be fixed in the next release. In the mean time it does not stop the mod from functioning.
In the meantime you can stop talking to me like that.

ForceHSS
06-21-2012, 11:26 AM
In the meantime you can stop talking to me like that.

I dont see his reply being rude in any way

Disco_Stu
06-21-2012, 11:35 AM
I dont see his reply being rude in any way

I agree.

It amazes me that people complain to the authors of the mods when they're getting them for free.

I've installed many of these (including paid premium versions) and I'm extremely grateful to the authors for making my board operations easier for me.

BirdOPrey5
06-21-2012, 11:52 AM
In the meantime you can stop talking to me like that.

Maybe there was an issue in translation? :confused:

"mean" did not mean "rude" in my sentence. (I was using it as a verb)

Verb:
Intend to indicate or refer to (a particular thing or notion); signify: "I don't know what you mean".

djbaxter
06-21-2012, 11:59 AM
In the meantime you can stop talking to me like that.

This is a 14 year old child with an obvious chip on his shoulder. Some advice, liamwli: Learn some common courtesy or you won't last long around here.

gajinoz
06-28-2012, 12:05 AM
This one sounds good, it will be going in tonight! :)

gajinoz
06-28-2012, 06:29 AM
I've installed this one and it seems to work just fine. One strange thing though, immediately after I went through the settings and saved them I hit the "Run Now" button and the following "error" appeared:


Warning: mysql_free_result() expects parameter 1 to be resource, object given in [path]/includes/cron/bop5_dupeip.php on line 126

Warning: mysql_free_result() expects parameter 1 to be resource, object given in [path]/includes/cron/bop5_dupeip.php on line 259


The mod appeared to work perfectly though, as far as I can tell, it posted the report in the forum I selected and had what appeared to be valid results so I'm not too concerned but I'm curious as to what the above warnings might mean.

[EDIT] Sorry, just went back and paid more attention to what I was reading. All is explained, ignore above.

Good mod, thanks. Marked as installed.

w00fy
07-01-2012, 05:31 PM
Thank you, Marked as installed..no issues running 4.2.0

ceho
07-02-2012, 06:56 PM
Hello, as said I love this mod :)! However I have one weird problem. I use Glowhost's Spam-O-Matic and no matter what I do and what I try, the report thread ends up in the mod queue every single night. I checked every setting like ten or twenty times, forum permission settings, usergroup settings, Spam-O-Matic settings, I guess simply everything. Still I have that issue. Does anybody have that as well and maybe an idea how to fix it? Thanks a lot :).

BirdOPrey5
07-02-2012, 10:40 PM
I don't use that mod, sorry... Hopefully someone else can chime in. Did you try changing the username associated with the report? Maybe the glowhost mod has some sort of "whitelist" for userids or usernames?

ForceHSS
07-03-2012, 01:07 PM
Hello, as said I love this mod :)! However I have one weird problem. I use Glowhost's Spam-O-Matic and no matter what I do and what I try, the report thread ends up in the mod queue every single night. I checked every setting like ten or twenty times, forum permission settings, usergroup settings, Spam-O-Matic settings, I guess simply everything. Still I have that issue. Does anybody have that as well and maybe an idea how to fix it? Thanks a lot :).

You need to post in the mod post and wait for someone to reply. Posting in another mod will not make it faster if anything will slow the help down

BirdOPrey5
07-03-2012, 01:43 PM
You need to post in the mod post and wait for someone to reply. Posting in another mod will not make it faster if anything will slow the help down

His problem involves this mod too, no reason not to post here- maybe someone has a solution.

ForceHSS
07-03-2012, 02:39 PM
His problem involves this mod too, no reason not to post here- maybe someone has a solution.

How does it when he is taking about spam o matic. Maybe if you can explain how it involves this mod?

BirdOPrey5
07-03-2012, 08:13 PM
He's saying the thread created by this mod is always being flagged as spam (moderated) by the other mod.

It's conceivable someone else in this thread either has the same problem, or uses bother mods without issue- in either case the better shot of finding people in his same situation is in this thread since the spam-o-matic mod has much more installs.

ForceHSS
07-04-2012, 01:02 PM
He's saying the thread created by this mod is always being flagged as spam (moderated) by the other mod.

It's conceivable someone else in this thread either has the same problem, or uses bother mods without issue- in either case the better shot of finding people in his same situation is in this thread since the spam-o-matic mod has much more installs.

I picked it up different

lodos0677
08-22-2012, 07:26 AM
marked. thanks.

LLent
08-28-2012, 11:42 PM
nice mod joe ....down the line i would like to see a time we can choose for this mod to run in acp setting that would be excellent

It's Damn Real!
08-30-2012, 11:41 PM
Having trouble getting this to run again on 4.1.11 Patch Level 3. It installs just fine, but the report never runs, even when run manually.

LLent
08-31-2012, 12:05 AM
for some reason these reports go right in to moderation how can i remedy this ..

BirdOPrey5
09-02-2012, 01:01 PM
Having trouble getting this to run again on 4.1.11 Patch Level 3. It installs just fine, but the report never runs, even when run manually.

How big is your database? (# of posts / # of users)?


for some reason these reports go right in to moderation how can i remedy this ..

You probably have a mod that puts posts with links in them into moderation. See if that mod has an option to white-list the user making these posts.

It's Damn Real!
09-02-2012, 01:11 PM
How big is your database? (# of posts / # of users)?

Database is 448.8 MB. 378,511 Posts, 525 Members.

BirdOPrey5
09-02-2012, 01:32 PM
That shouldn't be too bad... How many days back are you using in the mod settings for each report? If you try changing them both to like 3 days, does the report run?

Is any error shown when running manually?

LLent
09-02-2012, 06:07 PM
You probably have a mod that puts posts with links in them into moderation. See if that mod has an option to white-list the user making these posts.

no i dont the only thing i can think of is glowhost perhaps is doing this and not sure if that is the issue what code to put in to fix it...

BirdOPrey5
09-02-2012, 07:59 PM
Please disable glowhost temporarily from the product manager, then run a manual report and see what happens.

Snowhog
09-02-2012, 08:00 PM
Thank you. This is a nice report feature. Excellent work.

Anyway to change who is reported as having posted the report? Default is to identify the Owner of the Forum.

Marked as Installed, voted Excellent, and nominated for MOTM.

Running vBulleting 4.2.0 Patch Level 2.

BirdOPrey5
09-02-2012, 11:05 PM
Yes, in the mod settings is an option Report by User ID.

By default it is 1, but you can change it to any valid user id.

Snowhog
09-02-2012, 11:13 PM
Excellent! Thank you. Changed the default to my id as I am the Administrator who installed this MOD.

Again, great MOD. You do very good work.

It's Damn Real!
09-03-2012, 01:14 PM
That shouldn't be too bad... How many days back are you using in the mod settings for each report? If you try changing them both to like 3 days, does the report run?

Is any error shown when running manually?

All the settings are defaulted.


How Many Days Back To Check? (Posts) ? 7

How Many Days Back To Check? (Users) ? 30

Records Limit is 500

--

There's no "error" when the report runs manually ? it just reads:

"Duplicate IP Report by BOP5"

And nothing else.

BirdOPrey5
09-03-2012, 10:00 PM
Please set days back to 1 and 1 and see if anything happens.

It's Damn Real!
09-03-2012, 11:51 PM
Manual report still doesn't run. I can wait to see if the automatic report runs tonight.

It's Damn Real!
09-04-2012, 10:48 PM
Automatic report didn't run.

Superorb
09-07-2012, 06:16 AM
I ran the report from the Scheduled Tasks section and it returned these errors. The post was created and looks good though.


Duplicate IP Report by BOP5

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 126

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 259

Done

djbaxter
09-08-2012, 03:10 PM
Strange issue:

I have this installed on four 4.2.0 PL2 forums. On three, everything works as expected. On the fourth, for some reason all posts from this mod are placed in the moderation queue.

Forum permissions look fine (no moderation required for posts in that forum and it's only used for Duplicate IP reports).

Admin permissions look fine and the author of the Dup IP posts is set to me. If I manually start a new thread in that forum, it is NOT moderated.

Not a critical error I know but it's driving me nuts trying to figure out why it's happening. I should note that this forum is on the same dedicated server as one of the others which is working, so it's not a server configuration issue.

Snowhog
09-08-2012, 08:30 PM
BoP5@

Is it possible to designate more than one userID in Report by User ID? The description for this field doesn't indicate you can.

BirdOPrey5
09-11-2012, 11:26 AM
Automatic report didn't run.

Out of ideas. If you want to PM me Admin CP / FTP / phpmyadmin details i'll take a look but not even sure where I'd start.

I ran the report from the Scheduled Tasks section and it returned these errors. The post was created and looks good though.


Duplicate IP Report by BOP5

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 126

Warning: mysql_free_result(): supplied argument is not a valid MySQL result resource in [path]/includes/cron/bop5_dupeip.php on line 259

Done



known bug, thank you.

Robbed
10-06-2012, 12:58 PM
Great addon.

just a suggestion when report for registration ip addresses runs could you add an option where any users found will be moved to (COPPA) Users Awaiting Moderation.

TheSupportForum
10-06-2012, 01:04 PM
BoP5@

Is it possible to designate more than one userID in Report by User ID? The description for this field doesn't indicate you can.

why would you have you need a post sent via more than 1 user to a thread ?
it is designed as an automatic thread creator by 1 user to report duplicate IP's creating a post under 2 or more different usernames

TheSupportForum
10-06-2012, 01:06 PM
Great addon.

just a suggestion when report for registration ip addresses runs could you add an option where any users found will be moved to (COPPA) Users Awaiting Moderation.

in some countries you will have shared IP's due to the limitation a country would have on ISP

for example Serbia and Montenegro, they both share the same ISP's and their IP's are duplicated, so i think its not a good idea

Robbed
10-06-2012, 02:35 PM
that why it would be an option to turn on or off, everyone on my registration ip list is a spammer it would be easier to have them in moderation and have to approve these accounts.

BirdOPrey5
10-06-2012, 06:48 PM
BoP5@

Is it possible to designate more than one userID in Report by User ID? The description for this field doesn't indicate you can.

This doesn't send the report to the user, it is who the report gets posted by so only 1 id.

Great addon.

just a suggestion when report for registration ip addresses runs could you add an option where any users found will be moved to (COPPA) Users Awaiting Moderation.

I will think about this, not really a direction I intended to take this mod.

Jennifer2010
10-08-2012, 01:14 AM
I get a database error when trying to run a report.

After clicking Run report, after about 15 seconds:

Database error in vBulletin 4.2.0:

Invalid SQL:

(SELECT permissions, permissions2, FIND_IN_SET(forumid, '53,8,-1') AS pos, forumid
FROM moderator
WHERE userid = 16 AND forumid IN (53,8,-1)
ORDER BY pos ASC
LIMIT 1)
UNION
(SELECT permissions, permissions2, 0, forumid
FROM moderator
WHERE userid = 16 AND forumid = -1
);

MySQL Error : MySQL server has gone away
Error Number : 2006
Request Date : Sunday, October 7th 2012 @ 08:13:06 PM
Error Date : Sunday, October 7th 2012 @ 08:13:20 PM
Script : http://www.CENSORED.com/x1admincp/cronadmin.php?do=runcron&varname=bopdipcheck&manual=1
Referrer : http://www.CENSORED.com/x1admincp/options.php?do=options&dogroup=bopdupeip
IP Address : CENSORED
Username : CENSORED
Classname : vB_Database
MySQL Version :

ForceHSS
10-08-2012, 01:27 AM
<a href="http://www.vbulletin.com/docs/html/troubleshoot_mysql_goneaway" target="_blank">http://www.vbulletin.com/docs/html/t...mysql_goneaway</a>

TheSupportForum
10-08-2012, 12:52 PM
@BirdOPrey5

a few questions

1) i set the Reports to be in a private forum, no other usergroups see the forum accept administrators

on activity.php for 4.2.0 PL2 it appears for all users :(

i was just wondering whether this mod works with the the activity stream as unregistered users can see the post as


Snowderblazer Created a New Thread Duplicate IP Report for 07-10-2012


this is shown to all usergroups including unregistered even though they should not have permission to view it

Snowhog
10-08-2012, 03:45 PM
Not so here. If I look at the Activity Stream as a guest (not logged in to the forum), I do not see the generated report, and I have it written to a sub-forum accessible only by the Administrator usergroup.

TheSupportForum
10-08-2012, 03:56 PM
Not so here. If I look at the Activity Stream as a guest (not logged in to the forum), I do not see the generated report, and I have it written to a sub-forum accessible only by the Administrator usergroup.

for soem ready it shows, but found a fix using a plugin, strange but i hope that they implement a feature to not include certain forums

BirdOPrey5
10-08-2012, 06:46 PM
I get a database error when trying to run a report.

After clicking Run report, after about 15 seconds:

MySQL Has Gone Away Error probably means the query is overloading your database... How many users and how many posts do you have? You could try lowering the number of days back to look for each report.


@BirdOPrey5

a few questions

1) i set the Reports to be in a private forum, no other usergroups see the forum accept administrators

on activity.php for 4.2.0 PL2 it appears for all users :(

i was just wondering whether this mod works with the the activity stream as unregistered users can see the post as


Snowderblazer Created a New Thread Duplicate IP Report for 07-10-2012


this is shown to all usergroups including unregistered even though they should not have permission to view it

That would be a problem with the permissions on your forum, not this mod- this mod uses standard code to create a new thread- it is up to the VB 4.2.0 code to decide what goes in the activity stream and what doesn't.

TheSupportForum
10-09-2012, 02:19 AM
MySQL Has Gone Away Error probably means the query is overloading your database... How many users and how many posts do you have? You could try lowering the number of days back to look for each report.




That would be a problem with the permissions on your forum, not this mod- this mod uses standard code to create a new thread- it is up to the VB 4.2.0 code to decide what goes in the activity stream and what doesn't.

Thank you

but i found it rather strange that the forum was visible to me only "set as admin view only" but activity stream showed the threads to all users :(

i found a solution posted in vbulletin.com

using example in a template hook postdata_presave


if ($this->info['forum']['forumid'] == '2'){
$this->set_info('skip_activitystream', true);
}

Hostboard
10-09-2012, 10:26 AM
Fresh install on 4.2.0pl2
Ran the report after configuring it.
Report generated and posted but also got:


Post Check SQL:
SELECT mmpost.ipaddress, GROUP_CONCAT(DISTINCT mmpost.userid) AS userid, GROUP_CONCAT(DISTINCT mmpost.postid) AS postid, mmuser.usergroupid FROM mmpost LEFT JOIN mmuser ON mmuser.userid = mmpost.userid WHERE mmpost.dateline > 1349176946 AND mmpost.userid > 0 AND mmpost.ipaddress != '127.0.0.1' AND mmpost.ipaddress != '' GROUP BY mmpost.ipaddress HAVING COUNT(DISTINCT mmpost.userid) > 1 ORDER BY COUNT(DISTINCT mmpost.userid) DESC LIMIT 500

User Check SQL:
SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid FROM mmuser WHERE joindate > 1347189746 AND userid > 0 AND ipaddress != '127.0.0.1' AND ipaddress != '' GROUP BY ipaddress HAVING COUNT(DISTINCT userid) > 1 ORDER BY COUNT(DISTINCT userid) DESC LIMIT 500

TheSupportForum
10-09-2012, 10:33 AM
Fresh install on 4.2.0pl2
Ran the report after configuring it.
Report generated and posted but also got:


Post Check SQL:
SELECT mmpost.ipaddress, GROUP_CONCAT(DISTINCT mmpost.userid) AS userid, GROUP_CONCAT(DISTINCT mmpost.postid) AS postid, mmuser.usergroupid FROM mmpost LEFT JOIN mmuser ON mmuser.userid = mmpost.userid WHERE mmpost.dateline > 1349176946 AND mmpost.userid > 0 AND mmpost.ipaddress != '127.0.0.1' AND mmpost.ipaddress != '' GROUP BY mmpost.ipaddress HAVING COUNT(DISTINCT mmpost.userid) > 1 ORDER BY COUNT(DISTINCT mmpost.userid) DESC LIMIT 500

User Check SQL:
SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid FROM mmuser WHERE joindate > 1347189746 AND userid > 0 AND ipaddress != '127.0.0.1' AND ipaddress != '' GROUP BY ipaddress HAVING COUNT(DISTINCT userid) > 1 ORDER BY COUNT(DISTINCT userid) DESC LIMIT 500


have you se the forums you want the reports sent to

e.g.
http://img201.imageshack.us/img201/4681/a0940e47665d486eae3a0da.png

also ensure that the userid that reports it has access to that forum

Hostboard
10-09-2012, 11:21 AM
As noted, the reported ran and it posted properly.

TheSupportForum
10-09-2012, 11:53 AM
As noted, the reported ran and it posted properly.

Hmm i can only think its how the query is formed for your MYSQL version
seeing that you received the threads in your chosen forum, the script works

Hostboard
10-09-2012, 01:12 PM
Hmm i can only think its how the query is formed for your MYSQL version
seeing that you received the threads in your chosen forum, the script works

Running MySQL version:: 5.1.63-0ubuntu0.10.04.1

BirdOPrey5
10-12-2012, 10:51 AM
Fresh install on 4.2.0pl2
Ran the report after configuring it.
Report generated and posted but also got:


Post Check SQL:
SELECT mmpost.ipaddress, GROUP_CONCAT(DISTINCT mmpost.userid) AS userid, GROUP_CONCAT(DISTINCT mmpost.postid) AS postid, mmuser.usergroupid FROM mmpost LEFT JOIN mmuser ON mmuser.userid = mmpost.userid WHERE mmpost.dateline > 1349176946 AND mmpost.userid > 0 AND mmpost.ipaddress != '127.0.0.1' AND mmpost.ipaddress != '' GROUP BY mmpost.ipaddress HAVING COUNT(DISTINCT mmpost.userid) > 1 ORDER BY COUNT(DISTINCT mmpost.userid) DESC LIMIT 500

User Check SQL:
SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid FROM mmuser WHERE joindate > 1347189746 AND userid > 0 AND ipaddress != '127.0.0.1' AND ipaddress != '' GROUP BY ipaddress HAVING COUNT(DISTINCT userid) > 1 ORDER BY COUNT(DISTINCT userid) DESC LIMIT 500


Where did you "get" that code? If you manually run the report that is completely normal debug info that is output.

Skyrider
11-12-2012, 10:07 PM
https://vborg.vbsupport.ru/external/2012/11/22.png
For some reason, I'm using his IP & host and this happens on multiple users. Thus I'm showing up under the users "alternative" account list (multiple accounts). And this happens on 2 different forums of which I find weird. All started to happen when I used this plugin. My account ID is used to create the Duplicate IP thread by the way, of which I think might have something to do with it.

BirdOPrey5
12-17-2012, 10:24 PM
Long awaited update to Version 2.1.2.

Fixed the MySQLi bug and introduced a Gold/Premium version (no features removed from this free version!)

See first/top post for details.

Snowhog
12-17-2012, 10:54 PM
Updated. Thank you.

Hostboard
12-18-2012, 01:14 PM
One of those must haves...
Uninstalled... Went gold :D Thank you for the update & bonus!

dmm2020
01-01-2013, 01:17 AM
I can't download the xml file at www.Qapla.com. WHen I try to register or do anything, it hangs on "waiting for response from google plus one..."

datoneer
01-01-2013, 11:20 PM
Soon i'll buy gold one for sure

Mark4865
01-02-2013, 02:20 PM
Hello BOP

This looks like a fantastic mod and I would like to purchase the gold version for my website.

I just want to be able to view the reports via admin cp and not have them posted as threads in the forum as they are only for my use. Is that possible with Gold version.

If so I am ready to buy and have registered on your forum, please confirm.

Thanks for the great mod

BirdOPrey5
01-04-2013, 06:03 PM
I can't download the xml file at www.Qapla.com. WHen I try to register or do anything, it hangs on "waiting for response from google plus one..."

Please try again, I have gotten a number of new registrations over the last few days so it must be a temporary issue.

Hello BOP

This looks like a fantastic mod and I would like to purchase the gold version for my website.

I just want to be able to view the reports via admin cp and not have them posted as threads in the forum as they are only for my use. Is that possible with Gold version.

If so I am ready to buy and have registered on your forum, please confirm.

Thanks for the great mod

Yes you can turn off the posting of reports and use only the admin cp reports.

Mark4865
01-05-2013, 06:40 AM
Just bought the Gold Version, seems to be great value for money can't wait to install it

Thanks for effort BOP

Mark4865
01-05-2013, 11:09 AM
Install Gold Version and ran report, fantastic stuff came up with some very interesting info

Where do I find my thread id so I can specify it for future reports

My report showed some potential spammers which I wasn't aware off which was great

It also showed some duplicate IP addresses where I know users are legitimate and not spammers, 1 duplicate made sense as the 2 members work for same company but the other 2 didn't make sense. I am sure all are real users could it just be they logged onto same server or something?

diddy29
01-05-2013, 11:38 AM
Hi, looks like a great mod, but I keep running into these errors:

Warning: include_once([path]/./includes/cron/bop5_dupeip.php) [function.include-once]: failed to open stream: No such file or directory in [path]/admincp/cronadmin.php on line 113

Warning: include_once() [function.include]: Failed opening '[path]/./includes/cron/bop5_dupeip.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in [path]/admincp/cronadmin.php on line 113

I've disabled Glowhost, set my days 1, 1, but I still keep getting these errors when I run it manually.

We have a mod that prevents links from being posted until they have a minimum number of approved posts (2) to prevent spammers. That's worked perfectly, but could that prevent this from working?

Thank you!!

ForceHSS
01-05-2013, 04:31 PM
Hi, looks like a great mod, but I keep running into these errors:

Warning: include_once([path]/./includes/cron/bop5_dupeip.php) [function.include-once]: failed to open stream: No such file or directory in [path]/admincp/cronadmin.php on line 113

Warning: include_once() [function.include]: Failed opening '[path]/./includes/cron/bop5_dupeip.php' for inclusion (include_path='.:/usr/lib/php:/usr/local/lib/php') in [path]/admincp/cronadmin.php on line 113

I've disabled Glowhost, set my days 1, 1, but I still keep getting these errors when I run it manually.

We have a mod that prevents links from being posted until they have a minimum number of approved posts (2) to prevent spammers. That's worked perfectly, but could that prevent this from working?

Thank you!!

its not hard to work out the problem just upload the missing file it is asking for includes/cron/bop5_dupeip.php

diddy29
01-10-2013, 02:15 AM
its not hard to work out the problem just upload the missing file it is asking for includes/cron/bop5_dupeip.php
To confirm, do I just upload a file named bop5_dupeip.php or is there a special file named this that I have to acquire?

ForceHSS
01-10-2013, 02:50 AM
To confirm, do I just upload a file named bop5_dupeip.php or is there a special file named this that I have to acquire?

it is all in the file you downloaded

BirdOPrey5
01-12-2013, 02:12 PM
In the download zip for this mod there is a folder called upload, inside upload is includes, inside includes is cron, and inside cron in the file: bop5_dupeip.php

Using FTP upload bop5_dupeip.php onto your vBulletin install in the folder /includes/cron/

The folders after /upload/ match where the files need to go in your forums. Same as with the VB install files when you installed the forum.

Hostboard
02-20-2013, 02:13 PM
Took me awhile but I finally came up with some things that would be helpful (at least for me) At the moment I have it setup to post a thread/report into a dedicated forum. However I would like to stop those that have access to the forum from posting within the same thread. So would it possible to add a feature to auto-close the thread upon its posting? Also having the ability to make the thread auto-sticky for X amount of days would be great. This would allow x amount of reports (a week in my case) worth of reports to remain at the top of the forum and not get lost in the staff's chit chat.

TIA

BirdOPrey5
03-03-2013, 11:52 AM
Took me awhile but I finally came up with some things that would be helpful (at least for me) At the moment I have it setup to post a thread/report into a dedicated forum. However I would like to stop those that have access to the forum from posting within the same thread. So would it possible to add a feature to auto-close the thread upon its posting? Also having the ability to make the thread auto-sticky for X amount of days would be great. This would allow x amount of reports (a week in my case) worth of reports to remain at the top of the forum and not get lost in the staff's chit chat.

TIA

Closed threads is a good idea- I will make sure it is an option in the next update.

In the mean time if you want closed threads just edit the php file that came with the mod (in the /includes/cron/ directory)

Find the line:

$kthread->set('showsignature', $showsig);

And directly below it add:

$isopen = 0;
$kthread->setr('open', $isopen);

That will create all threads as closed threads.

If you want to go back to open threads just change $isopen = 1 instead.


The sticky threads for X number of days isn't likely to happen, would be too much code with nothing to do with this mod IMO.

BirdOPrey5
03-03-2013, 12:45 PM
Not likely either- that would require keeping some type of log in the database which means creating new database tables, regular reading from and updates to those tables, just an annoyance from a coding point of view.

BirdOPrey5
03-04-2013, 11:42 AM
The 2 existing queries can be quite heavy, especially on large forms- doubling the queries would cause more timeout issues or require forum admins to restrict how far back the mod looks even more. That's why if I did implement this feature it would be with a custom log not a duplicate query one day earlier.

Second issue with your logic, there would be a report every other day.

tpearl5
07-18-2013, 01:11 AM
Has anyone seen two users with the same ips multiple times that also use tapatalk? It seems posts made either from tapatalk or mobile phones in general more commonly get the same ips.

BirdOPrey5
07-18-2013, 08:59 AM
Has anyone seen two users with the same ips multiple times that also use tapatalk? It seems posts made either from tapatalk or mobile phones in general more commonly get the same ips.

Yes, as I noted in the first post users using mobile devices often share the same IP address. I have users in different states that often end up sharing the same verizon wireless, cingular, at&t, or sprint IP addresses because they are using their cell phones to access. It's not Tapatalk's IP address, it's the fact the mobile providers don't use unique IPs.

tpearl5
07-18-2013, 09:45 AM
Right, okay. I read everything but the rest of the first post :) And that's what I figured with the mobile IP's.

Bubble #5
09-09-2013, 03:59 AM
BOP5 you always come up with the best mods! This is exactly what I was looking for :up:

Nominated for MOTM.

When I ran it I saw some code. Is it normal for it to display this in the ACP?

Post Check SQL:
SELECT post.ipaddress, GROUP_CONCAT(DISTINCT post.userid) AS userid, GROUP_CONCAT(DISTINCT post.postid) AS postid, user.usergroupid FROM post LEFT JOIN user ON user.userid = post.userid WHERE post.dateline > 1378097227 AND post.userid > 0 AND post.ipaddress != '127.0.0.1' AND post.ipaddress != '' GROUP BY post.ipaddress HAVING COUNT(DISTINCT post.userid) > 1 ORDER BY COUNT(DISTINCT post.userid) DESC LIMIT 500

User Check SQL:
SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid FROM user WHERE joindate > 1376110027 AND userid > 0 AND ipaddress != '127.0.0.1' AND ipaddress != '' GROUP BY ipaddress HAVING COUNT(DISTINCT userid) > 1 ORDER BY COUNT(DISTINCT userid) DESC LIMIT 500

BirdOPrey5
09-09-2013, 07:51 AM
Yes, if you run the task manually I have it display the queries for debugging purposes. It won't show if not run manually.

ForceHSS
09-09-2013, 09:39 AM
What do I need to change in the scheduled task so it will run once every 7 days on a Monday. Time does not matter as long as it runs each Monday.

CAG CheechDogg
09-09-2013, 10:06 AM
To do that do the following..

Day of the week: Monday
Day of the Month: *
Hour: what ever hour of the day you want
Minute: what ever minute of the day you want

ForceHSS
09-10-2013, 03:41 AM
Thanks

CAG CheechDogg
09-10-2013, 04:57 AM
No problem ForceHSS ....

ali1359
09-17-2013, 03:34 PM
When I hit Run Report Now :


MySQL Error : Invalid use of group function
Error Number : 1111
Request Date : Tuesday, September 17th 2013 @ 11:31:52 AM
Error Date : Tuesday, September 17th 2013 @ 11:31:52 AM
Script : http://xxxxx.com/admincp/cronadmin.php?do=runcron&varname=bopdipcheck&manual=1
Referrer :
IP Address : xx.xx.x.xx
Username : Admin
Classname : vB_Database_MySQLi
MySQL Version : 4.1.21-community-nt


What I have to do ?

BirdOPrey5
09-17-2013, 10:06 PM
I'm sorry I don't know why. It may be your MySQL version is too old, I have only tested this on MySQL 5.x.x never got a chance to test on MySQL 4.1.21.

Bubble #5
09-21-2013, 11:45 PM
Is there a way to have it send an e-mail to the admin, instead of posting a thread?

Would be so much easier to manage, and would catch most peoples attention sooner.

ozzy47
09-21-2013, 11:59 PM
I suppose you could subscribe to the forum that you have the mod posting in and choose, Instant notification by email, then you would get a email that a new thread was made.

Bubble #5
09-22-2013, 12:04 AM
Yes, but then you'd also have to go in and clean up 30 threads per month :p

Would be so much more straight forward to not make the threads and just send the e-mail. Just say'in ;)

ozzy47
09-22-2013, 12:10 AM
What do you mean by clean up threads?

IMO it is better to have the threads, so you have a record of the report, and if you or your mods took action on it, you can post in there what you did or did not due.

With that being said, I am sure it is very possible to have it as a email, but that will have to wait till Joe can get around to adding such a feature if he wishes to, or has the time to do. :)

Bubble #5
09-22-2013, 12:18 AM
What do you mean by clean up threads?
Clean up, as in delete them because they aren't needed anymore.

IMO it is better to have the threads, so you have a record of the report
You can save a e-mail just as easily, and mods on my site don't have access to this section of the forum. If someone is away from their site, say they are out shopping, they would still be made aware of what was happening on their site by getting an e-mail about it.

I am sure it is very possible to have it as a email, but that will have to wait till Joe can get around to adding such a feature if he wishes to, or has the time to do.
Yes, fully understand :)

iraqiboy90
09-22-2013, 01:39 AM
Let's say;
- I have 200 users
- There are many duplicated IPs
- No more posts has been added or registration for a week.

then, does this mod create the same report 7 times?

ps. I have the gold version

Bubble #5
09-22-2013, 01:45 AM
Once per night you'll get a report.

iraqiboy90
09-22-2013, 02:46 AM
Once per night you'll get a report.

In other words; The same report 7 times....
Is there any option to exclude those numbers/IPs from showing on further reports if nothing new happens to them?

ozzy47
09-22-2013, 03:02 AM
According to the original post: There are options for whitelisting (ignoring) specific IP Addresses and/or userids.

BirdOPrey5
09-22-2013, 03:37 AM
Is there a way to have it send an e-mail to the admin, instead of posting a thread?

Would be so much easier to manage, and would catch most peoples attention sooner.

An email option is a good suggestion I will try to add in a future version. The debate whether a post or email is better is just going to be personal preference. I like keeping records as posts since I have a forum for all sorts of automated reports- but I can certainly understand the desire to have it by email instead.

Let's say;
- I have 200 users
- There are many duplicated IPs
- No more posts has been added or registration for a week.

then, does this mod create the same report 7 times?

ps. I have the gold version

In this respect the Gold and Free versions work the same.

Yes and no... The same posts will be re-reported if they are within the look back window of both reports, but each day that goes by the oldest duplicates will fall off the report. So if your post look back window is 7 days on the day 1 report you will see all duplicates in the last 7 days. But by day 4 you'll see only 3 days of duplicates as by your example there have been no duplicates for 4 days at that point.

Honestly... If you have all that many duplicates there's a problem... If your site is small then people are definitely using "Alter egos" - If you have a very busy site your look-back window would be a lot shorter, just because there are too many posts to query at once. So on a super busy forum I would image a look back window of only say 3 days instead of 7 or 30. A 3 day window means about 33% of the reports are new each night.

For example on my OT forum which has about 100 active members on any given day and maybe 300 unique members in a month, I do a post look-back of 7 days. After cleaning up all the initial multiple-accounts found by this mod, sometimes weeks go by with no duplicates reported- what is is just the occasional mobile users who wind up on the same IP.

In other words; The same report 7 times....
Is there any option to exclude those numbers/IPs from showing on further reports if nothing new happens to them?

Whitelisting specific IPs or usernames are an option but no way to not show duplicates previously reported if they fall in the same look-back window.

I suppose you can edit the scheduled task to run once a week instead of every night, then set a look-back window of 7 days, so each time it runs it is completely fresh data that will only be reported once, but in that case you could go an entire week before being notified about a duplicate account.

Bubble #5
09-27-2013, 01:08 AM
All of these reports are being moderated.

How do I stop them from being moderated?

Didn't see a setting...

djbaxter
09-27-2013, 01:19 AM
All of these reports are being moderated.

How do I stop them from being moderated?

Didn't see a setting...

I have this installed on 4 forums. On one of them, I have the same problem - all posted reports are placed in moderation. I have checked, double-checked, and triple-checked all settings I can think of and I can't find anything different for the one with the moderated posts. Moreover, two of those forums are on the same server - one works without moderation; the other puts all reports into moderation.

I'm bewitched, baffled, and bewildered.

Even the add-ons in the two forums on the same server are largely the same. If anything, the one that works properly may have a few more add-ons.

Totally stumped.

Bubble #5
09-27-2013, 03:41 AM
Sounds like a bug.... I mean, unspecified feature somewhere ;)


It does drive me crazy how it fills the moderation section up, and the weird thing is that it doesn't do it everyday. Some days it posts like it should :cool:

BirdOPrey5
09-27-2013, 11:36 AM
It is anti-spam software moderating posts, either a 3rd party mod or if you have an Anti-Spam Service enabled in options.

If a 3rd party mod you should be able to whitelist the user who makes the posts.

djbaxter
09-27-2013, 01:36 PM
It is anti-spam software moderating posts, either a 3rd party mod or if you have an Anti-Spam Service enabled in options.

If a 3rd party mod you should be able to whitelist the user who makes the posts.

I am the user making the posts (and an Admin) but none of my other posts get moderated.

BirdOPrey5
09-27-2013, 02:02 PM
It's possible it doesn't like the IP address saved for the post and basing moderation decision on that. If you search the PHP file for

127.0.0.1

You can replace it with any ip address you want, see if that helps. If it does I will make it a user option.

Bubble #5
09-27-2013, 04:40 PM
I am the user making the posts (and an Admin) but none of my other posts get moderated.

Same here djbaxter, which is how I first noticed the problem. It didn't make any sense that user ID 1 would be moderated :p I checked and I am using two spam mods; Spambot Stopper (https://vborg.vbsupport.ru/showthread.php?t=294633&highlight=spambot+stopper) and Spam-o-Matic (https://vborg.vbsupport.ru/showthread.php?t=248042&highlight=spambot+stopper). I have disabled Spambot Stopper to remove it from the equation, and when I looked through Spam-o-matic I did notice that it has a moderation feature, so I turned that off. I'll see if that helps.

thunderclap82
09-27-2013, 06:57 PM
Any way to set this to check weekly? I looked in the scheduled tasks and it appears I can only do daily or monthly by choosing a specific date.

BirdOPrey5
09-27-2013, 09:59 PM
There is a "Day of Week" option drop-down in the Scheduled Task editor.

thunderclap82
09-28-2013, 12:38 AM
There is a "Day of Week" option drop-down in the Scheduled Task editor.

Doh! Missed that one right in front of me. Thanks!

spankaveli
09-30-2013, 05:26 AM
I see a way to whitelist certain IPs but is there a way to whitelist IP blocks? (for example, the 166.x.x.x block since that is used by AT&T wireless?)

BirdOPrey5
10-01-2013, 11:02 AM
I see a way to whitelist certain IPs but is there a way to whitelist IP blocks? (for example, the 166.x.x.x block since that is used by AT&T wireless?)

No, not at this time... Will look into adding that into a future version.

iraqiboy90
10-01-2013, 03:57 PM
An email option is a good suggestion I will try to add in a future version. The debate whether a post or email is better is just going to be personal preference. I like keeping records as posts since I have a forum for all sorts of automated reports- but I can certainly understand the desire to have it by email instead.



In this respect the Gold and Free versions work the same.

Yes and no... The same posts will be re-reported if they are within the look back window of both reports, but each day that goes by the oldest duplicates will fall off the report. So if your post look back window is 7 days on the day 1 report you will see all duplicates in the last 7 days. But by day 4 you'll see only 3 days of duplicates as by your example there have been no duplicates for 4 days at that point.

Honestly... If you have all that many duplicates there's a problem... If your site is small then people are definitely using "Alter egos" - If you have a very busy site your look-back window would be a lot shorter, just because there are too many posts to query at once. So on a super busy forum I would image a look back window of only say 3 days instead of 7 or 30. A 3 day window means about 33% of the reports are new each night.

For example on my OT forum which has about 100 active members on any given day and maybe 300 unique members in a month, I do a post look-back of 7 days. After cleaning up all the initial multiple-accounts found by this mod, sometimes weeks go by with no duplicates reported- what is is just the occasional mobile users who wind up on the same IP.



Whitelisting specific IPs or usernames are an option but no way to not show duplicates previously reported if they fall in the same look-back window.

I suppose you can edit the scheduled task to run once a week instead of every night, then set a look-back window of 7 days, so each time it runs it is completely fresh data that will only be reported once, but in that case you could go an entire week before being notified about a duplicate account.

Problem is that at one time my forum was reporting the wrong IP of the users. It was instead reporting an internal IP, the same one for everyone, for almost 6-9 hours.

In this time, there has been created multiple posts, which is why my report is long and got to many post numbers in it.

Manually editing the IP (by removing them) from the DB (manually, I guess) will be lot of pain. Therefore I see that whitelisting that IP will be a better option, if there is no other option you can recommend.

regards

cshellworld
12-09-2013, 06:57 PM
4.2.1 installed , thanks

Barcham
01-28-2014, 12:28 AM
This is exactly what I've been needing. I am in the process of setting up a new board and I am certain that I am going to have some problems with some members of a former board I used to belong to. this will be a great help in tracking them down before they can cause problems!!!

Thank you so much!!!

MarkFL
07-20-2014, 04:46 PM
Ever since I was promoted to global moderator at the site I now help administrate, I have been wanting something like this. Now I don't have to go on hunches and suspicions alone...this was easy to install and is easy to use (vBulletin 4.2.0 patch levels 3 & 4 and 4.2.1).

Great work, BOP5! :up:

5 star rating and nominated for MOTM.

mservis
10-02-2014, 02:28 AM
Perfect.
installed in vBulletin 4.2.2 Patch Level 1

Working now

Greetings

Skyrider
10-02-2014, 05:40 PM
This might be a bug (or missing feature) but.. Right now it looks like in ACP... posts IPs are getting compared with all IPs (post and registration ones) ... while registration IPs are getting compared ONLY with other registration IPs.

For example at our "Boo" user and another profile using same IP.

That's what it looks like given that when looking at Boo, you can find the other acount via the post IP, even tho the other account used that IP as registration

Is this an issue?

BirdOPrey5
10-02-2014, 11:21 PM
This might be a bug (or missing feature) but.. Right now it looks like in ACP... posts IPs are getting compared with all IPs (post and registration ones) ... while registration IPs are getting compared ONLY with other registration IPs.

For example at our "Boo" user and another profile using same IP.



Is this an issue?

I'm may not be fully understanding the question- but looking at the SQL query it is clear the only IP addresses being checked in the posts report are the post IP addresses. It would be impossible for that query to check against registration IPs as those IPs are never returned/mentioned in the query.

If "Boo" is being returned in the post report it means the other username returned with boo has also posted posts with the same IP boo has posted from during the report period.

Skyrider
10-03-2014, 04:27 PM
I'm may not be fully understanding the question- but looking at the SQL query it is clear the only IP addresses being checked in the posts report are the post IP addresses. It would be impossible for that query to check against registration IPs as those IPs are never returned/mentioned in the query.

If "Boo" is being returned in the post report it means the other username returned with boo has also posted posts with the same IP boo has posted from during the report period.
I'll give an example.

We currently found 2 forum profiles, of which we are sure that they are the same person, but the duplicate IP report isn't showing it in the report.

I'll replace Boo with Person A and the other profile with Person B.

Person A has a post count of 0, and the registration IP address in the AdminCP (of the profile) is 123.456.789 (not showing real IP address for obvious reasons). When I check his IP address through the AdminCP, it shows:

Registration IP Address - 123.456.789
Post IP Addresses - No Matches Found
Registration IP Addresses - No Matches Found

Awesome, lets continue!

Now, when I look at Person B

Has 3 post counts, and the registration IP address in the AdminCP is 987.654.321

Now, you can see that Person A and Person B don't have a matching IP address. However, when I use the AdminCP to View the IP address of Person B.

Registration IP Address - 987.654.321
Post IP Addresses - 123.456.789 [Find More Users with this IP Address]

Clicking "[Find More Users with this IP Address]" results in:

123.456.789 [host information here]

Post IP address:
Person B 123.456.789

Registration IP address:
Person A 123.456.789

As you can see. Person B with 3 posts, at least used the Post IP address of person A once. I can't find any IP reports from user A, but when I search through the IP results of Person B, I can find Person A.

I was wondering if this plugin can be extended a little bit so it can include the registration/post IP address match, regardless if it cannot be found in 1 profile, but can be found through another.

Hope you understand it a bit now.

(in this example I might have switched the IP's, 123 with 987 at the end. If that's the case, just swap them). Was using 2 example IP addresses and it is possible I mixed them up with one and other. But I think you'll get the general idea.

BirdOPrey5
10-04-2014, 09:40 AM
Oh, I did misunderstand. I thought you were reporting a bug because registration IPs were not only being checked against registration IPs...

Indeed it was by design registration IPs only check against other registration IPs and post IPs only check against other post IPs.

You want a report that checks across both...

Unfortunately that was not an intended option and it is not something I will be adding- it would be a more difficult query and honestly one I think would be of limited use- as is these queries can take a big hit on the server- making them more complex will increase the chance of timeout/db errors.

Sorry.

If I had an idea I'd give you a hint on how to make the change yourself- the query code is in the php file- but I'm not sure how to go about combining the two- as is these were about as complex a mysql query I can handle.

Amenadiel
11-08-2014, 04:10 PM
+1 for supporting wildcards and or IP blocks in the IP whitelist field. I want to add Cloudflare's IP ranges.

Kesha
11-08-2014, 04:58 PM
Hey BOP!

I just installed your mod and I'm currently attempting to run it from the Admin CP (Options section) to try it out. I have a private forum set up, which is only accessible by Moderators and Admins. The issue is, when I click the Run Now button, the resulting page is simply "Duplicate IP Report by BOP5" followed by the word "Done" on a new line.

I saw a similar issue in this thread by another user so I decided to try some of what you asked him to do, with no luck. (disabling the Spam-O-Matic plugin, setting days to check to 1 & 1, etc.)

MySQL Version is 5.5.40-0ubuntu0.14.04.1, and PHP version is 5.5.9-1ubuntu4.5.

The forum itself is a large forum. Over 100,000 accounts are registered and over 1.9 million posts are in the database.

Any suggestions?

EDIT: Just figured it out... Apparently, the file that I uploaded did not have the correct permissions. After setting +rw on the file, it runs as promised and this mod runs now. Sorry about that!

BJJBJ
11-14-2014, 09:43 AM
Hey BOP!

I just installed your mod and I'm currently attempting to run it from the Admin CP (Options section) to try it out. I have a private forum set up, which is only accessible by Moderators and Admins. The issue is, when I click the Run Now button, the resulting page is simply "Duplicate IP Report by BOP5" followed by the word "Done" on a new line.

I saw a similar issue in this thread by another user so I decided to try some of what you asked him to do, with no luck. (disabling the Spam-O-Matic plugin, setting days to check to 1 & 1, etc.)

MySQL Version is 5.5.40-0ubuntu0.14.04.1, and PHP version is 5.5.9-1ubuntu4.5.

The forum itself is a large forum. Over 100,000 accounts are registered and over 1.9 million posts are in the database.

Any suggestions?

EDIT: Just figured it out... Apparently, the file that I uploaded did not have the correct permissions. After setting +rw on the file, it runs as promised and this mod runs now. Sorry about that!

I've got the exact same problem as above but his fix didn't work.

BirdOPrey5
11-14-2014, 04:35 PM
I've got the exact same problem as above but his fix didn't work.

If you are having issue with the Gold version (the free one doesn't have Admin CP interface) please post in the mod thread on qapla.com or PM me on Qapla.com- I can't provide support for the paid mod here on vbulletin.org.

Kesha
11-15-2014, 04:17 PM
Just wanted to provide another update. I've had a chance to install and use this mod now, and let me just say that it works surprisingly well with my forum (being a larger forum). The only thing that I wish this modification had, is a duplicate account checker upon registration (with similar style alerts as this mod) but for the price I paid (nothing), this mod does it all for me.

Thank you kindly to BOP5 for this wonderful mod.

BirdOPrey5
11-15-2014, 05:15 PM
Just wanted to provide another update. I've had a chance to install and use this mod now, and let me just say that it works surprisingly well with my forum (being a larger forum). The only thing that I wish this modification had, is a duplicate account checker upon registration (with similar style alerts as this mod) but for the price I paid (nothing), this mod does it all for me.

Thank you kindly to BOP5 for this wonderful mod.

Thanks for the kind words. I couldn't "Like" this post because I liked an earlier one. But to your "wishes" if someone registers with an IP address already used (and within the time window specified) they will show up in the report the next say.

If you wanted to actually prevent someone with the same IP from registering again that is possible with the Recent Registration Check mod which is free with the purchase of the paid version of this mod. It doesn't make a report, just blocks the registration (or moderates it) based on your settings.

Snowhog
01-17-2015, 08:33 PM
The mod posts the report to a specified Forum. I'd like to be able to choose between posting to a Forum or sending the report to an email address.

Faskis
01-01-2016, 05:32 PM
I've found that the scheduled task for this only runs if done manually, but does not run at the scheduled time (it does list a future date/time). I can't find anything about it in the error logs. Any help would be appreciated.

MarkFL
01-01-2016, 07:06 PM
I've found that the scheduled task for this only runs if done manually, but does not run at the scheduled time (it does list a future date/time). I can't find anything about it in the error logs. Any help would be appreciated.

I have this set to run on the first day of each month, and it has always done so without fail.

Any additional information regarding how you have the product scheduled to run will be helpful to the mod author when providing support. :)

CAG CheechDogg
01-01-2016, 07:32 PM
It also runs as it should for me ...

the one
01-02-2016, 01:32 PM
Works great for me

Faskis
01-02-2016, 04:23 PM
I have this set to run on the first day of each month, and it has always done so without fail.

Any additional information regarding how you have the product scheduled to run will be helpful to the mod author when providing support. :)

I have it set to run at midnight each day at the moment. Next runtime is listed as 1/3/2016 @ 12:00AM. This is how the settings look at the moment: http://puu.sh/mh58u/49266da7d2.png


The scheduled task log only shows the 3 instances that I'd ran the task manually: http://puu.sh/mh5dD/ee096d632c.png



Any idea on how the scheduled tasks actually run? Does it cue the server to run a command-line instance of PHP to execute the task, via cron or whatever have you? I was thinking if it attempts to do something like a cURL request that maybe Cloudflare could be interfering with the connection (I had that issue recently with a script that I was working on).

BirdOPrey5
01-05-2016, 02:02 PM
It adds a scheduled task to vBulletin's list of scheduled tasks that can be seen in the Admin CP under Scheduled Task Manager.

Like all scheduled tasks they are only triggered if there is regular traffic to the forum because they are initiated on a page load where the cronimage is triggered which is in the footer template.

If no one visits the site at night the task never gets triggered.

There is a window of course, if someone comes soon after it should trigger, but at some point it just won't trigger.

Try setting it to run during a busier time of the day on your forum perhaps.

Faskis
01-06-2016, 02:14 AM
It adds a scheduled task to vBulletin's list of scheduled tasks that can be seen in the Admin CP under Scheduled Task Manager.

Like all scheduled tasks they are only triggered if there is regular traffic to the forum because they are initiated on a page load where the cronimage is triggered which is in the footer template.

If no one visits the site at night the task never gets triggered.

There is a window of course, if someone comes soon after it should trigger, but at some point it just won't trigger.

Try setting it to run during a busier time of the day on your forum perhaps.

On average, there are ~200 users active at anytime of the day, so I don't think that's the issue, but I'll go ahead and adjust it to run every 6 hours to see if any of those will work.


Edit: Forgot that the scheduled tasks don't work exactly like cron jobs do, so you can't specify multiple hours. I've adjusted it to a busier hour, however.

Hostboard
03-23-2020, 05:24 PM
When IPV6 is detected and reported, if the code is like "colon" "D" a smile is displayed. Will need to disable smiles in the forums settings,