User activity logs?

[Gripi]

Hi...

Is there a feature to view user logs? such as when the user change password, email address, and using what IP address?

lots of member in my forum said they user id got hijacked.. but the problem is.. i cannot see when, or from what ip address the user id got hijacked.

and i think this is a good idea, because the logs is very important to troubleshooting a problem.

thanks

[Simon Lloyd]

you'd need a query to th database for that information, in phpmyadmin userchangelog table run this query
SELECT`oldvalue` ,`newvalue` ,`change_time`
FROM`userchangelog`
WHERE`userid`=1
LIMIT 0 , 30Dont forget to add your table prefix if you have one before userchangelog and change userid to whichever user you are checking!

[Gripi]

hello..

thanks alot.. its works..

but no friendly interface to view this in admincp ?

one more thing, in the userchangelog, i saw ipaddress field, how to read that ip, such as:

1854530124 or 3399374709 or 1988691765

[Simon Lloyd]

just add ipaddress as i have done for the first 3things you see in th query,i think those ae the date/time stamps arent they? you need to check on a unix site for the exact time and date.

[kh99]

There is a mysql function for converting a timestamp, so instead of `change_time` you can use FROM_UNIXTIME(`change_time`). You can even format it the way you like: http://dev.mysql.com/doc/refman/5.0/en/date-and-time-functions.html#function_from-unixtime

[Max Taxable]

Also here's a handy tracker to install:

http://statcounter.com

[Gripi]

just add ipaddress as i have done for the first 3things you see in th query,i think those ae the date/time stamps arent they? you need to check on a unix site for the exact time and date.

hello.. sorry misunderstand, i mean how to read the ip address:

1854530124 <- 185.453.0.124 or 18.545.30.124 ? or ?

[Simon Lloyd]

Thats the date!!!, look at the query it says change_time thats a unix timestamp there isn't any ip information in the user_changelog, didn't you look at it when you were in phpmyadmin?

[Gripi]

that a look at this printscreen, it's an ip address field with value "3758089792"

what is the meaning of "3758089792" ? i'm sure its not a valid timestamp, because i convert it to date, the result "Tue, 01 Feb 2089 09:49:52 GMT"

thanks

[Simon Lloyd]

That ipaddress column has been added by another mod it's not part of vbulletin!

[Gripi]

oh okey..

one last question, do you know in what file the userchangelog script? so i can modify it a little bit to put an ip address everytime the member change anything.

thanks

[Simon Lloyd]

Below you will see a list of every file that contains the word "userchangelog" and the number of occurrences.

class_userchangelog.php 35 times /includes/class_userchangelog.php
user.php 11 times /admincp/user.php
class_dm_user.php 10 times /includes/class_dm_user.php
mysql-schema.php 4 times /install/mysql-schema.php
upgrade_370b2.php 2 times /install/upgrade_370b2.php
md5_sums_vbulletin.php 1 time /includes/md5_sums_vbulletin.php

[Gripi]

thank you very much..

i hope this complete features available in vbulletin soon.

--------------- Added 1352742386 at 1352742386 ---------------

Below you will see a list of every file that contains the word "userchangelog" and the number of occurrences.

class_userchangelog.php 35 times /includes/class_userchangelog.php
user.php 11 times /admincp/user.php
class_dm_user.php 10 times /includes/class_dm_user.php
mysql-schema.php 4 times /install/mysql-schema.php
upgrade_370b2.php 2 times /install/upgrade_370b2.php
md5_sums_vbulletin.php 1 time /includes/md5_sums_vbulletin.php


hello simon.. may i know how you get this detail above? using software scanner?

because i couldnt found out, what addons that write the ipaddress field.