vb.org Archive - Multiple account login detector (AE Detector)

Page 10 of 13

Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)

- - Multiple account login detector (AE Detector) (https://vborg.vbsupport.ru/showthread.php?t=107566)

HBC	08-20-2006 09:53 AM

Quote:

Originally Posted by PhenomLeader

I am using 3.6 and it works for me. Question.... does the user see anything? Does it not allow them to login or something ?

user has no idea..

and yes they can log in on all accounts they have until you stop them by whatever means you deem necessary.

PhenomLeader

08-20-2006 07:33 PM

Ok, was just wondering!

NeitherSparky

08-20-2006 11:50 PM

All right - I have installed this in 3.6.0 and it is working. For some reason though, while it is successfully sending a post to my Staff forum it is NOT sending me a PM even though I have specified Send PM on Multiple Login Detection=Yes (can it not do both?). Otherwise it is fine. :)

edit: Figured out what I did wrong, it should be fine now. :)

b6gm6n

08-21-2006 03:02 AM

vB3.6... works like this, you can do both (PM/Thread) or PM only... but not thread only... if you disable PM's...you also disable new thread creation to!

-b6

MPDev

08-23-2006 11:56 AM

I hadn't planned on upgrading to vB3.6 initially; so didn't have anything to offer in terms of ideas on what to change. I've recently upgraded and will take a look at the code - as far as being "supported", it was relased for 3.5 and I've supported it on 3.5.

It appears to be working for me on 3.6 and I do not use PMs at all; just new threads in a private forum.

Ghanem

08-23-2006 05:10 PM

Quote:

Originally Posted by MPDev

It appears to be working for me on 3.6 and I do not use PMs at all; just new threads in a private forum.

Its working on my 3.6 board, creates new threads, sends PMs, and ignores users I set it to do so :)

NeitherSparky

08-23-2006 09:00 PM

Okay, I am *guessing* that this isn't working? I have this crazy guy who's been harassing me for a long time, he has two accounts on my new vBulletin forum. He is on, right now, with both accounts, with the same exact IP address. Shouldn't this detector have gone off if it was working?

edit: Nevermind, he's probably on two computers next to eachother in a computer lab. Sorry, my bad.

Quarterbore

08-24-2006 03:31 PM

I installed this on a fresh install of vB 3.6 and I do not use the PM function and it seems to work... well with an issue I can't figure out!

I am getting TONS or Multiple account notices... I installed this early this AM (like 1AM here) and we have about a dozen alerts already. Most of the members we have asked have replied they have no idea why this would be...

IP addresses don't match, locations are not even close...

I am going to try to figure it out by looking at the code...

I know that when I tested it that it DID detect multiple logins that should have been (I have five test accounts) BUT the false hits are really something!

MPDev

08-24-2006 03:57 PM

Given that there is no IP tracking at all in this mod; it can only be tripped if users access multiple accounts on the same computer - there is no way to create a "false positive".

Quarterbore

08-24-2006 05:38 PM

Quote:

Originally Posted by MPDev

Given that there is no IP tracking at all in this mod; it can only be tripped if users access multiple accounts on the same computer - there is no way to create a "false positive".

No, there has to be something wrong here...

I have about 2-dozen hits now and I know some members are on the west coast while others are here on the East. This works by looking at the cookie and my guess is that there is something in the cookie that is getting added by vb 3.6 that is causing me problems... or I have some other conflict on my site.

Frustrating as I really want to use this!

I will be looking at this to try to see if I can find any differences between what 3.5.x put in the cookie as opposed to 3.6.0 but something has changed... at least on my site it did!

Quarterbore

08-24-2006 05:57 PM

Well, I figured it out... and man is this UGLY!

My problem is that I did a fresh install of vB 3.6 and I used Impex to IMPORT all of my forums, threads, and users! Well, a sizable percentage of my users userid CHANGED!

So now, these users have the old cookie from the old site on their systems PLUS the cookie for the new software. I assume that once everybody visits the updated forums that these errors will stop happening but with over 2000-members I may get these crazy errors for quite some time.

I know that the maximun shift I saw in userid was 4 so I may code the system to ignore userids that are 4 or less apart. This really hurts as this was a very handy tool!

MPDev

08-25-2006 01:24 PM

Well, that would do it. If they logged in under the old system and it has their userid recorded; then that would be a problem for you.

Quarterbore

08-25-2006 01:34 PM

Can I please request a little programing help with my issue?

I know that my members USERID behaves in a VERY predictable way when comparing the original userid to the new userid. Here is the breakdown:

If USERID is # - then I want the system to ignore...

(788 or less) (ignore Userid+1 as a duplicate)
(789 to 960) (report any duplicates)
(961 to 1550) (ignore Userid-1 as duplicates)
(1551 to 1762) (ignore Userid-2 as duplicates)
(1763 to 1843) (ignore Userid-3 as duplicates)
(1844 or higher) (report all duplicates!)

Now, I know this code is done by the "Login Checker" plugin and the code I need to add these conditional is here:

PHP Code:


		
			
if( empty($idstack) )  

                    {  

                        $idstack = ",{$vbulletin->userinfo['userid']},";  

                        setcookie("IDstack", $idstack, time()+10368000, "/");  

                    }  

                    else  

                    {  

                        if(!strstr($idstack, ",{$vbulletin->userinfo['userid']},"))  

                        {  

                            $idstack .= ",{$vbulletin->userinfo['userid']},";  

                            setcookie("IDstack", $idstack, time()+10368000, "/");  

      

                            $Unums = split(",", $idstack);  

                            $andids = null;  

                            $numvs = 0;  

                              

                            for ($i = 0; $i < (sizeof($Unums)); $i++)   

                            {  

                                if( verify_id('user', $Unums[$i], FALSE, -1, -1) )  

                                {  

                                    if (!empty($Unums[$i]) && is_numeric($Unums[$i])) {          

                                        $checkuser = $vbulletin->db->query_first("SELECT username FROM " . TABLE_PREFIX . "user WHERE userid={$Unums[$i]}");  

                                        if ( !empty($andids) ) $andids .= "and";  

                                        $andids .= " [url=". $vbulletin->options['bburl'] ."/member.php?u=" . $Unums[$i] . "] ". $checkuser['username'] ."[/url] ";  

                                        $numvs++;  

                                    }  

                                }  

                            }  

                              

                            // Make sure we have at least 2 valid user violations  

                            if ( $numvs < 2 ) return;  

                              

                            $allowsmilie = '1';  

                            $visible = '1';

Now, would the best way for me to fix my self induced problem be to write a series of conditional like this:

PHP Code:


		
			
// Adjust for IMPORT ID issue

$loggedinuser = $vbulletin->userinfo['userid'];

if (!empty($Unums[$i]) && is_numeric($Unums[$i])) { 

     If ($loggedinuser <= 188 AND $loggedinuser == Unums[$i] + 1){$numvs--;}

     If ($loggedinuser >= 961  AND $loggedinuser <= 1550 AND $loggedinuser == Unums[$i] - 1){$numvs--;}

     If ($loggedinuser >= 1551  AND $loggedinuser <= 1762 AND $loggedinuser == Unums[$i] - 2){$numvs--;}

     If ($loggedinuser >= 1763  AND $loggedinuser <= 1843 AND $loggedinuser == Unums[$i] - 3){$numvs--;}

}

I assume that I have the variables figured out but this will be really hard fro me to test on my live site to figure out if it is eliminiatig the correct accounts! I addedd this right above the "// Make sure we have at least 2 valid user violations "

EDIT - FWIW, there is a bug in that code as I just tried it... It have me a syntax error as well as a headers resent error and I had to disable pluggins to remove the pluggin from my system. I still think the basic concept may work but this is not the right place or way to do it!!!

I'll update if I figure this out but from my count this impacts about 1700 members on my site so dealing with that many alerts is a huge problem!

markblair

08-27-2006 06:29 AM

Quote:

Originally Posted by NeitherSparky

What was causing this issue? I am having the same problem. I'm getting the new thread but no PM is being sent. And both options are turned on.

Nick0r

08-27-2006 08:28 AM

For me it's not creating a thread, no matter what - never worked in 3.5 either for some reason.

NeitherSparky

08-27-2006 03:17 PM

Quote:

Originally Posted by markblair

What was causing this issue? I am having the same problem. I'm getting the new thread but no PM is being sent. And both options are turned on.

I took a screencap of my settings, not only to answer your question but hopefully to help people having trouble getting the thing to create a thread too.

The reason the PMs weren't working was simple enough - the default setting for the "Users who recieve the PM upon multiple login detection" is "Administrator" and my username on my forum isn't "Administrator", its Sparky! So I just changed that.

As for the thread creation, you have to mark "Enable New Thread Creation on Multiple Login Detection?" - Yes, and then put in the correct "ForumID For AE Multiple Login Detection reports", AND set the "Userid of who PM sender / Alert poster" to someone who has permission to post in that forum - 1 being of course myself (the target forum is a Staff forum). For the users to ignore, I have myself and my test account, which is number 2.

I hope this helps *somebody*. :P

MPDev

08-28-2006 08:03 PM

Since we have alot of people (including myself) who have it working on 3.5 and 3.6, if you cannot get it to work you probably did one of the following: installed it incorrectly, have the setting set wrong or have something installed that is interfering with our app (although we have no known plugins that do this).

voteforbird

08-28-2006 10:34 PM

Will this work with 3.6.0? Thanks.

Mattikana

08-29-2006 05:40 PM

Quote:

Originally Posted by voteforbird

Will this work with 3.6.0? Thanks.

It works for me on 3.6 Gold, I have the PM report enabled and the thread rpeort disabled.

cyclical

08-29-2006 09:13 PM

I am still getting false positives...

Quarterbore

08-30-2006 10:20 AM

Quote:

Originally Posted by cyclical

I am still getting false positives...

Did you upgrade and use Impex to import user information from an old board? That is what caused my problems and I have not been able to figure out how to add a series of conditionals to ignore an issue if the USERID detected before = OLDUSERID as I described here:

https://vborg.vbsupport.ru/showpost....&postcount=373

When I get time I plan to reprogram this to log hits into the database and then it will be easier for me to control what is reported and how... This is frustrating as this was one of the most useful tools I had on my site!

Does anybody know if I were to change the cookie prefix if that would allow the system to ignore the old cookie on my users computer?

EDIT - NOPE, Changing the cookie prefix did not help either...

MPDev

08-30-2006 08:51 PM

Quote:

Originally Posted by cyclical

I am still getting false positives...

You can't get false positives. Since it's enitrely cookie-based, that data has to reside on the same computer - no other way to trigger it.

Neo_obs

09-02-2006 05:33 AM

I hate to tell you but there is a flaw that gives you false positives I know this as I was testing it with my own accounts and got a false positive

bashy

09-02-2006 06:22 AM

testing with your own accounts will give you positive as its cookie based!!!

I have not had any issues with regards to any fales readings from this, i have used it pretty much from the start :)

MPDev

09-02-2006 08:50 PM

Quote:

Originally Posted by Neo_obs

I hate to tell you but there is a flaw that gives you false positives I know this as I was testing it with my own accounts and got a false positive

Once again, this is not possible given how this mod works.

cyclical

09-02-2006 09:23 PM

I have a buddy in Bahrain.. and another friend in Philadelphia, and it was saying they were using the same computer. They are on opposite sides of the world.

I understand its cookie based...

I had it on 3.5, then our wonderful host lost everything. We had to start a new forum from scratch (3.6) and I installed it. These two users for example never triggered a false positive, and the day I re-installed this on 3.6 I started getting it. I don't know how or why.

MPDev

09-03-2006 02:12 PM

If you had been using it previously - lost everything - reinstalled and then users ended up with different userids than before; then the "old" cookies with their "old" userids would still exist.

cyclical

09-03-2006 02:37 PM

Quote:

Originally Posted by MPDev

If you had been using it previously - lost everything - reinstalled and then users ended up with different userids than before; then the "old" cookies with their "old" userids would still exist.

right... and in that case it would cause the cookies to report more than one user.

But in this case the two different users kept the same name...

cyclical

09-03-2006 03:12 PM

By the way, it doesn't look at userids at all does it?

MPDev

09-04-2006 01:29 AM

It only looks at userids as usernames can change; but generally speaking userids never change unless they are logging into other accounts.

VBUsers

09-04-2006 02:01 AM

does this work on 3.6 and if so what do i have to do?

Neo_obs

09-04-2006 08:17 AM

Quote:

Originally Posted by bashy

testing with your own accounts will give you positive as its cookie based!!!

I have not had any issues with regards to any fales readings from this, i have used it pretty much from the start :)

The problem is I was on different computers and it still detected me being on the same computer. I run a school computer lab and we have 25 computers I created 25 accounts each on seperate computers. I hate to tell you but it does create false positives.

I would like to know how you can delete or flush the database either entirely or individually for each user.

cyclical

09-04-2006 02:36 PM

Quote:

Originally Posted by MPDev

It only looks at userids as usernames can change; but generally speaking userids never change unless they are logging into other accounts.

I found another 2 false positives today...

I know for damn sure that people involved have never logged in from the same computer. They live about 70 miles away from each other.

UserIds don't change, but in my case they did because I had to re-install the forums and everyone had to re-register. (new user id's)..

MPDev

09-05-2006 11:40 AM

Quote:

UserIds don't change, but in my case they did because I had to re-install the forums and everyone had to re-register. (new user id's)..

Well, if your userids changed; then you'll get reports but that is an exception based on problems with your site, not our plug-in.

Quote:

I would like to know how you can delete or flush the database either entirely or individually for each user.

There is no database to flush and there is no way to create cookies on seperate computers.

Quote:

does this work on 3.6 and if so what do i have to do?

I guess this has to be repated on every page; yes, it works on 3.6.

PHPGeek2k3

09-06-2006 03:34 AM

i have a possible solution to fix the problem with changing user-id's for those with that one exception.

I will code this out and send the possible code fixes to MPDev and see what he has to say.

Thanks
- James

Thomas P

09-06-2006 10:25 PM

Hello,

I'm a bit concerned about the server load on heavy trafficed forums with many, many people having duplicate accounts.

Does the thread creation process eat CPU?

When are the threads created exactly?

Thanks,
-Tom

BTW: Great hack, really deserves the MotM price

PHPGeek2k3

09-08-2006 03:11 AM

Quote:

Originally Posted by Thomas P

This hack only checks upon user logging into the forum. this should not affect your server load.

Thanks
- James

Thomas P

09-08-2006 11:43 AM

The hack's checks a cookie.

If it detects a duplicate account a thread is being created - this means more queries = more server load, depending on how many duplicate accounts are logging in during peak times.

So the question is: How many queries does the hack add to our forum on top of the others?

MPDev

09-08-2006 06:17 PM

No queries are performed unless a user is tripping the detector and then only those that normally account for adding a new post anywhere else in your forum.

Thomas P

09-08-2006 08:10 PM

Ok, thanks for the info :)

We have it online now and it is working very good.

Thanks, great job,
-Tom

All times are GMT. The time now is 10:30 PM.

Page 10 of 13

« First

Last »

Show 40 post(s) from this thread on one page

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.02482 seconds Memory Usage 1,880KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (2)bbcode_php_printable (16)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (1)post_thanks_navbar_search (1)printthread (40)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start pagenav_page pagenav_complete bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: