duplicate ip/password list! [Archive]

supreemball

03-17-2002, 10:00 PM

and here it is, finally.. perhaps one of the sweetest hacks i've ever installed.. unfortunately i didn't write it, but wired from http://www.xirgo.com (an awesome host, btw) did, and he gave me permission to release it on here.

this is the duplicate ip/password list hack. this basically shows all duplicate accounts on your vb forum sorted by their ip and/or password. this easily allows you to detect who's really who on your forum, and delete/ban accounts that you think are duplicates.

basically it works like this. there are two parts to this list, one part sorted by duplicate ip, the other part sorted by duplicate password. you can definitely tell users have multiple accounts on your forum if you see two (or more) users both with duplicate ip's AND passwords. this list also lists their post counts and their last visit date, so, if you want to just delete one of someone's duplicate accounts, you can choose to do so by either their last visit date (delete/ban the account that hasn't been on the forum longer), or by their number of posts (delete/ban the account that has the less posts).

please note that NOT ALL duplicate pw's are duplicate accounts, obviously. any user can happen to have the same pw as someone else. i wouldn't recommend deleting people with JUST duplicate pw's, nor with JUST duplicate ip's, because of shared accounts on the same connection, etc., but they can definitely be fishy.

to install this hack, simply put the dupeip.php file into your /admin directory of your vb forum. then to access it, go to yoursite.com/forum/admin/dupeip.php, of course.. that's it! no templates to install, no files to modify!

NOTE: the passwords on the list are in their VB encrypted form, but to be safe, only show this list to the other admins of your forum, although by putting it in your /admin folder it will ask for an admin login anyway.

Neo

03-18-2002, 03:10 AM

Funny I have made a hack to stop this from happening all together. What it does it stop people with a Ip that is already registered from registering again... while this hack you have is very nice... this would prove to be more carefree and protective..

https://vborg.vbsupport.ru/showthread.php?s=&threadid=36049

Scrub

03-18-2002, 03:12 AM

Got to give this a try. Use to have several users who used to have register multipule times to raise their original post count. :D

Scrub

03-18-2002, 03:14 AM

Originally posted by neo
Funny I have made a hack to stop this from happening all together. What it does it stop people with a Ip that is already registered from registering again... while this hack you have is very nice... this would prove to be more carefree and protective..

https://vborg.vbsupport.ru/showthread.php?s=&threadid=36049

But what about dynamic IPs? Cause in my area, someone else can get the IP I was using a few months ago.. :confused:

supreemball

03-18-2002, 03:15 AM

that's a good idea for a hack, but i wouldn't install it myself, neo. some people on my forum, although listed on the duplicate ip list, ARE different people, i know for a fact. so installing that hack would only tick them off, although there are ways of getting around it, of course.

Neo

03-18-2002, 03:41 AM

well I just guess those people would have to live with it... But in my opinion this hack has the same usfulness as mine, but with a few added features... but anyways..nice of you to post it for the rest of us

SaintDog

03-18-2002, 07:25 AM

I had edited a script that was made here about a week ago to do the same thing this hack did, almost, mine did not show duplicate passwords, but it also was not as organized. Instead of showing them grouped together, I had to go down a list of 200+ members to find the duplicate ones to investigate.

Thanks for this hack, another backup should someone be able to get around the hack neo mad :).

SaintDog

SaintDog

03-18-2002, 09:26 AM

I became rather board and the white and all was hurting my eyes so I made a few changes to make it look like the control panel (default style), it makes thing a little neater in my opinion.

I am not taking credit for anything other than changing some colors :) - I am hoping this is not a problem? The file is the same, just made to look a little better.

Download Below:

Tim Wheatley

03-18-2002, 10:00 AM

Originally posted by neo
Funny I have made a hack to stop this from happening all together. What it does it stop people with a Ip that is already registered from registering again... while this hack you have is very nice... this would prove to be more carefree and protective..

https://vborg.vbsupport.ru/showthread.php?s=&threadid=36049 Problem with that though is that a lot of (for example) Australian's have the same ISP, with dynamic IP's so you could be banning/stopping lots of innocent users with that...

supreemball

03-18-2002, 11:05 AM

saintdog, thanks for taking the time to do that, although i get a header info error with that file for some reason.. not sure why, but it works like a charm.. i do admit the interface for mine is rather ugly, but it provides more function rather than beauty, and plus i had no intentions of linking the file from admin cp either.

SaintDog

03-18-2002, 07:02 PM

Seems to be working fine for me, at least since I have been using it. I will see if I left out or deleted anything from the script that may be causing the header error. If I can find the reason I will re-upload it.

SaintDog

Zedd

03-19-2002, 10:34 PM

Hi, hack sounds great. I downloaded the file and installe dit, but when I run it I get a blank white screen. Was I suppose to modify the file in anyway to get it to work on my server?

SaintDog

03-19-2002, 11:26 PM

Nope, just upload to your /admin folder and open your browser and goto the location of the file :)

SaintDog

Zedd

03-19-2002, 11:50 PM

ok I did that and it did not work, so here is a question.

I have the php3 version, so all of my php files end in php3

So what is the difference between the two versions VB offers and which one are the hacks written for

SaintDog

03-19-2002, 11:55 PM

The hack was written for the PHP versions I am pretty sure, although there should not be too much of a difference I would not think, but I do not know everything about php so I could be wrong.

SaintDog

nafae

03-20-2002, 01:29 AM

Saintdog/supreemball: In addition to your pretty color change, I added an admin nav option to the admin's index.php page, and that is when I notice the "not outputing header" error. Here is what I put for the nav link:

//the normal part of the navigation
makenavoption("Build Mailing List","email.php?action=genlist"," ");
//this is the part I added:
makenavoption("View Duplicate IP Addresses","dupeip.php/");

I added the slash at the end of dupeip.php because vbulletin was adding things to the url that your script didn't like, so I was getting "page not found" errors. What can I do to add a link on the admin page and get it to integrate as normal? Any ideas?

Great hack btw, :D

Axel Foley

03-20-2002, 10:28 PM

Saintdog: your version produces a warning if you call the script directly, but if you integrate it in the CP it works fine. :)

Nafae: you can do it this way (this is an extract of my index.php, the Hacks sections) look at the dupeip line.

// *************************************************
makenavoption("Login Information","loginlog.php?action=modify"," ");
makenavoption("PM Stats","pmstats.php?action="," ");
makenavoption("Moderator Logs","modlog.php?showLimit=25"," ");
makenavoption("Mass PM","masspm.php?action="," ");
makenavoption("Duplicate IPs&PW","dupeip.php?action="," ");
makenavoption("Template Backup System","tbs.php?action=modify");
makenavselect("Hacks","<hr>");
makenavoption("Browse Attach.","browseatt.php?action=intro"," ");
makenavoption("Delete Attach.","rematt.php?action=intro"," ");
makenavoption("Convert Date/Time","convert.php?action=intro"," ");
makenavoption("Encrypt String","convert.php?action=intro"," ");
makenavselect("Hack Admin Func.","<hr>");
// *************************************************

Supreemball: thanks a lot for this one. I'll integrate it with the extended version of the loginlog hack (originally by PPN) that I made to look at dupes also for login IPs...:D

Jawelin

03-21-2002, 09:26 AM

Originally posted by SaintDog
I became rather board and the white and all was hurting my eyes so I made a few changes to make it look like the control panel (default style), it makes thing a little neater in my opinion.
[...]

Nice restyle... Just, shouldn't have been a little cleaner to use
cpheader() and cpfooter() functions as in each AdminCP page, instead of replicating such a html code inside the php script ?

:laugh: Thanks

chris frolic

04-02-2002, 04:56 AM

Awesome hack. Love it :).

LaNder

04-02-2002, 08:35 AM

i integrated it in the CP but it still shows the errors:

Warning: Cannot add header information - headers already sent by (output started at /.../admin/dupeip.php:5) in /.../admin/global.php on line 118

... line 119
... line 120
... line 121

how can i fix it?

LaNder

Sadie Frost

04-03-2002, 06:08 PM

Great hack!

One question - it seems like it only checks for duplicate IPs that are in the profile (the one you see in the admin cp when you search for a user). It doesn't look through all the IPs (like if you choose view IPs for this user and then find other users for this IP). Is there any way to make it look through every IP for the user?

Thanks! :)

-=dm=-

04-03-2002, 07:49 PM

Originally posted by LaNder
i integrated it in the CP but it still shows the errors:

how can i fix it?

LaNder

Im getting the same error:(

SaintDog

04-03-2002, 11:11 PM

I don't get any errors, I have clicked, clicked, and clicked again :) - yet nothing comes up for me, it works perfectly fine. All I have done is link to it via the admin cp and it works fine.

SaintDog

LaNder

04-05-2002, 03:52 PM

ok i found the problem and made a little change to your code:

your code:

<html>
<head>
<title></title>
</head>
<style type="text/css">
a:link{
background-color: transparent;
color: #3F3849;
text-decoration: none;
}

a:active{
background-color: transparent;
color: #3F3849;
text-decoration: none;
}

a:visited{
background-color: transparent;
color: #3F3849;
text-decoration: none;
}

a:hover{
background-color: transparent;
color: #3F3849;
font-weight: normal;
text-decoration: underline;
}
</style>

<body bgcolor="#BBBBBB">
<?php
error_reporting(7);

require("./global.php");

echo "<center>[<a href='#'>duplicate ip addresses</a>] | [<a href='#pass'>duplicate passwords</a>]</center>";

i replaced it with:

<?php
error_reporting(7);

require("./global.php");

cpheader();

echo "<center>[<a href='#'>duplicate ip addresses</a>] | [<a href='#pass'>duplicate passwords</a>]</center>";

now it works fine for me :)

LaNder

mondaynightmike

04-16-2002, 04:37 PM

great just installed this but i get 3 users all having the same password, i know one of them is a totally different person. The other two i had suspected were the same person. My question is out of 103 members what are the chances that 3 memebers all have the same. As it seems pretty strange to me

Jawelin

04-17-2002, 05:28 PM

Great hack and great idea.
I tried to extend it with the same idea, but didn't manage: infact I would search similar usernames and similar emailnames using for instance the SOUNDEX() MySQL function.
But realized I can't group by or order by rows upon string functions fields... only on primitive ones.

Somebody does have any idea ?
Thanks

Mathiau

05-01-2002, 07:34 AM

great hack, am putting it in now, but how exactly do i put a link to it in the Admin CP? anyone, anyone :D (could not see how above)

Meirion

05-01-2002, 11:07 AM

[duplicate ip addresses] | [duplicate passwords] | [hide zero posters] | [show zero posters]

This hack is really good! Dead simple, but will be very usefull in my superlsueth opperations in busting the doubles.

I added a little extra feature in this attached version - an option to show or hide accounts that have a zero post count.

Meirion

05-01-2002, 11:09 AM

Aha, I've just noticed a slight bug/feature in my version. You get single rows in the hide zero-posters option! Obviously this isn't that usefull, but I suppose it lets you know that there are other users with a dupe IP/pw for that user, except you've just chosen to hide them.

Meirion

05-01-2002, 11:13 AM

Going back to what someone else mentioned earlier - this only searches through the last recorded IP for each user.

Another really fine way of busting people with many psuodonyms is to check back through their posts and see which IPs were used by different users at the same time, or within 15 mins of each other. I get this with people coming on as themselves, making a few posts then switching to their alter ego and causing some [better wash my mouth][better wash my mouth][better wash my mouth][better wash my mouth].

Who's up for helping writing a bit of SQL to do that!?

Thomas P

05-01-2002, 12:43 PM

Hi,

very nice hack! :)

Is there a way to resolve the IPs?

Would be great, having the hostname too would make it easier to say if a duplicate IP happened because of a proxy or a static host...

Thanks anyway,
-Tom

Jawelin

05-02-2002, 07:11 AM

I'm looking a way to search for similar usernames and similar email names (first part, till '@')...
SOUNDEX() MySQL function would be nice this matter, but can't manage to GROUP BY a function instead a true table field, as this hack does.

Anyone could help ?
Thanks a lot.
Bye

Meirion

05-02-2002, 07:59 AM

Do you have a problem with members registering several names that sound simillar?

In my experience when somebody registers and alternate alias they use a dodgy Hotmail account and a completely different name in order to not be traced.

As for grouping by function, dunno, is there a quick and dirty way of making a temporary table with these results in then doing a standard SELECT with a GROUP on that temp table?

Meirion

05-02-2002, 08:03 AM

Originally posted by Thomas P
Is there a way to resolve the IPs?

Would be great, having the hostname too would make it easier to say if a duplicate IP happened because of a proxy or a static host...

I don't think so, as hostname=IP and IP=hostname. You won't reveal any extra information by resolving the IPs, appart from which ISP someone is using.
Unless you mean the opposite, where by resolving IPs will let you see people on dynamic IPs that use the same provider.

NTLDR

05-02-2002, 08:11 AM

Originally posted by Meirion
You won't reveal any extra information by resolving the IPs, appart from which ISP someone is using.

You will find out the hostname, which maybe something like proxy.isp.com which is usefull and what Thomas P wanted, so he can see if the multiple IP's are from proxy server and therefore more likly to be legitimate signups.

Meirion

05-02-2002, 08:13 AM

Sorry, I thought some more and I understand what you mean now. You mean to prevent accidentally banning someone who ended up having a matching IP due to it being behind a proxy?

Meirion

05-02-2002, 08:15 AM

Sorry I was on a bit of a "bust their ass" crusade. I suppose there are some legitimate members out there. I bet my membership would halve if I got rid of all the false names! :D

NTLDR

05-02-2002, 08:18 AM

Originally posted by Meirion
Sorry, I thought some more and I understand what you mean now. You mean to prevent accidentally banning someone who ended up having a matching IP due to it being behind a proxy?

Yep, thats exactly what I mean, I have users who are know are all individuals but have a duplicate IP due to the proxy server they use.

Sorry I was on a bit of a "bust their ass" crusade

lol, no probs, we all get like that at times :D

Jawelin

05-02-2002, 08:25 AM

Originally posted by Meirion
Do you have a problem with members registering several names that sound simillar?

In my experience when somebody registers and alternate alias they use a dodgy Hotmail account and a completely different name in order to not be traced.

As for grouping by function, dunno, is there a quick and dirty way of making a temporary table with these results in then doing a standard SELECT with a GROUP on that temp table?

FoA, thanks for such a fast answer.

Yes, I'm trying to findout possible dupe users (along with ip & pw) by an approximative check of username & email name...
I know well it'd be an 'empiric' way, but not too more than looking for dupe identical password, don't you agree ?

Hwr, a temp table seemed a good solution me too...
But, first I could do a little bit more precise job at php level with lot of memory used to sort the fetch_array; second I wouldn't mess up the db too much creating and destroying temp tables at runtime... Third, I have no idea of the performance and fragmentation impacts such a table could give.
:p

Thank you again.
Bye

Meirion

05-02-2002, 09:28 AM

Lol, never trust that email-reply feature that this board has. I just replied by email and my topic appeared in two other threads! (but never showed up here). Lol, then I get my head bitten off.

Meirion

05-02-2002, 09:28 AM

this is what I posted:

I think on my board that hunting for similar sounding names would not prove
fruitful at all.
I suppose it all greatly depends on how many users you have as to the
intensity of an opperation like this. My php & SQL knowledge ends at this
level!

I would much rather concentrate on a script that would use the IPs in the
posts table and look for users using the same IP within a certain time
frame, eg 15 mins. This should catch people out when they change login from
their real name to the false name in order to flame someone.
Obviously doing a search like that on the post table would be a
server-destroying style query, so my plan would be to feed it a user name
that was suspicious. It would then crank back through the last 20 posts of
that user, grab the IPs, then see if anyone had used that IP within 15 mins
of that post time.

Does that make sense? Do you think it would work?

pHAZE_1

05-09-2002, 10:13 PM

for some reason i cant open the attachment.. can someone make sure it is working?

stark

06-18-2002, 12:48 PM

I just wanted to say this is a LIFESAVER for the board I run. Great, great add-on. This should be in vB3.

Max M

08-20-2002, 10:21 PM

Hey, would anyone be able to modify this hack so the passwords aren't encrypted? It would be a lot of help!

Thanks :)

NTLDR

08-20-2002, 10:38 PM

Originally posted by Max M
Hey, would anyone be able to modify this hack so the passwords aren't encrypted? It would be a lot of help!

This is imposible. You cannot de-crypt the MD5 hash.

dwh

09-02-2002, 06:36 PM

You can add more features to this by adding the user's usercp options. Like sigs off, or how many posts per page they are viewing.

Unknown553

09-04-2002, 04:44 AM

Anyone know how to combine the two and view by BOTH duplicate IP's and passwords? Yes, I am this lazy, and I have a lot of duplicate IPs and duplicate passwords on my forum, and finding the ones that have both in common is becoming tedious. Any help?

SkuZZy

09-24-2002, 12:32 PM

fricken awesome hack!!!!! Been looking for something like this... ;)

SkuZZy

09-24-2002, 12:32 PM

fricken awesome hack!!!!! Been looking for something like this... ;)

sebastien69

01-12-2003, 04:53 AM

The requested URL /forum/admin/moderator.php was not found on this server.

I have not file moderator.php or I find him(it) thank you

drives fast

01-12-2003, 02:57 PM

is it just me or has anyone else noticed that if you click the duplicate passwords link it brings up the list of doupe IP's and then the doupe passwords as well instead of just the doupe passords list alone?

Xziz

05-26-2003, 09:45 PM

Added if a user can post to the outpout, a remove link, an admin header footer, and a reverse lookup of the ip addresses. if you are interested feel free to download it. It did not take much time but might help some of those of you who don't have time to add these things.

insanctus

05-29-2003, 07:17 AM

~ clicks install..... I like this thanks.

paratek

06-05-2003, 09:36 PM

Clicks install....great hack

Kriek

07-10-2003, 11:04 PM

Flawless via 2.3.0

/me clicks install

PurpleCow

08-10-2003, 05:27 AM

I would search similar usernames and similar emailnames using

Did anyone manage to that working with similiar emailnames particularly, i'd be very intereste din this ???

Such a very useful hack for my boards to be launched. Great work guys. there seems to be more than 4 versions in this thread by now, let me try them out.

Flawless via 2.3.0

Good, as i am also using 2.3.0

Thanks for the hack and the support.

Cheers

Oblivion Knight

08-11-2003, 11:34 AM

To integrate this into the control panel, I did the following:

Open admin/index.php
Find: makenavoption("IP Addresses","user.php?action=doips"," ");Add AFTER it: makenavoption("Duplicate IPs & PWs","dupeip.php?action="," ");

Open admin/dupeip.php
Find: require("./global.php");Add AFTER it: if (isset($action)==0) {
$action="modify";
}

ssabmud

09-07-2003, 12:32 AM

Awesome hack. Love it!!!!

chuckwk

09-12-2003, 09:31 PM

I got this error in control panel...

Warning: Address is not a valid IPv4 or IPv6 address in /home/virtual/site17/fst/var/www/html/admin/dupeip.php on line 74

Yes, I have IP loggin enabled.

Any help would be appreciated.

Thanks!

94supratt

09-13-2003, 11:10 AM

This only checks the IPs used to register? That is not nearly as helpful as checking it against ALL the IPs a user uses. Many people get on the internet at work and have atleast 2 IPs. Heck I just did a search on the IPs I've used and I've used 24. So basically this hack has a 1 in 24 chance in stopping me. Good hack however I think it can be improved.