Away Security Hack...

[Chris M]

This should work on all 2.2.x versions...

I have tested it on 2.2.6, and a friend has on 2.2.7...

I was reminded about this by Arunan, and decided to make it a small hack:)

What it does :
Searches for a specific file in the Admin panel, and wont let the CP work with it there...

What it is useful for :
You can upload it before you go on holiday, so your cp cannot be accessed...

Files to edit : 1 (admin/global.php)
Files to add : 1 (secure.php)

Enjoy!:)

Its small, but simple!:)

Satan

[Chris M]

Here is the secure.php file...

Satan

[NTLDR]

Sounds cool hellsaten, I have .htaccess protection, but this is still a good hack none the less. Thanks for sharing ;)

[g-force2k2]

:p i guess you got the idea of off the install.php still being in the admin folder hellsatan ;) ? or am i wrong... :p regards...

g-force2k2

[Brad]

hmm ive always just uploaded the install.php when i went away :D

[g-force2k2]

Originally posted by Anime-loo
hmm ive always just uploaded the install.php when i went away :D

:p hopefully it was blank though ;) because then someone could just reinstall a new forum right over yours :p regards...

g-force2k2

[DrkFusion]

I will be releasing my version maybe too ;)
By the way I am Arunan :)

I did this as a joke and put warnings all over the page, but now I made it so it logs ips, and dates and so on.

Anyways, I click install :)

[Gohan]

Hmm.. If i'm back from holiday than i must need delete a secure.php from server??

Or i have better idea.. you could try make or i'll try make (just first need permisson from you)

AdminCP check to ON or OFF switch (like as closed board)
If you back from holiday than could you login to AdminCP

AdminCP check to your userid number (standard number 1) if correct number 1 than opened

[kmfdm_kid2000]

Originally posted by Gohan
Hmm.. If i'm back from holiday than i must need delete a secure.php from server??

Instead of deleting, try renaming?? That might work too...

[Chris M]

Yeh...

I am trying to integrate some of the code used in my guessword hack, to make it have 5 random words generated...

It will prompt you with which word to enter, like : "What is the name of your pet?" and if you enter it, you are given access...

@Gohan - If someone hacks your vB account, its not very secure if it asks for Id 1 is it?;)

Satan

[Gohan]

or better second password for AdminCP opened?

[Chris M]

Its kind of the same thing...

I'll let you know how it goes;)

Satan

[adriandaz]

cool, I called the secure.php secure-unlock and change it to secure-lock.php when I am away, I also changed the code for this to work in global.php ;)

[Chris M]

Cool:)

I still use it, but I am trying to find another way to improve security;)

Satan