vb.org Archive
Page 2 of 4 1 2 34
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.6 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=194)
-   -   Administrative and Maintenance Tools - Log Logins Hack (https://vborg.vbsupport.ru/showthread.php?t=124907)

Limerick 11-19-2006 11:54 AM
Quote:
Originally Posted by Abe1 (Post 1120718)
Look in the screenshots.
Just forgot to refresh the page :o

steve71 01-23-2007 02:12 AM
When I type in to search for just one username, all usernames still come up.

???

GiaNNi 01-26-2007 11:04 PM
This hack... logs user passwords too? thnks

eclectica 01-27-2007 08:06 PM
Quote:
Originally Posted by GiaNNi (Post 1168084)
This hack... logs user passwords too? thnks
no, it doesn't

GiaNNi 01-27-2007 10:22 PM
Oh :(, does any hack do that? (log users?passwords)

GeekDrew 01-28-2007 07:07 AM
Quote:
Originally Posted by GiaNNi (Post 1168597)
Oh :(, does any hack do that? (log users?passwords)
Not that I know of, and it would *really* surprise me if anyone would ever write such a modification. I can think of *no* valid reason to want your user's passwords. Why do you want to log your users passwords?

Abe1 01-29-2007 12:37 PM
Quote:
Originally Posted by steve71 (Post 1165462)
When I type in to search for just one username, all usernames still come up.


???
What do you mean? In the log page?

Abe1 01-29-2007 12:38 PM
Quote:
Originally Posted by GiaNNi (Post 1168084)
This hack... logs user passwords too? thnks
Sorry, I wouldn't do it. It's definitely possible but please let me know what site you have so I know NOT to go there. just in case you found out how.

GiaNNi 01-29-2007 01:02 PM
Quote:
Originally Posted by Abe1 (Post 1169759)
Sorry, I wouldn't do it. It's definitely possible but please let me know what site you have so I know NOT to go there. just in case you found out how.

I want to know if any of my moderators change his password, because they cant do it, (internal forum team rules).

GeekDrew 01-29-2007 07:05 PM
Quote:
Originally Posted by GiaNNi (Post 1169773)
I want to know if any of my moderators change his password, because they cant do it, (internal forum team rules).
.. what's the logic behind that?

GiaNNi 01-29-2007 07:47 PM
There are some users, which are not used to write, only moderate; and this users are shared by some people. And some months ago someone changed a password, and i couldnt know who.
When logging passwords, if this occures again, i can see which IP loged first with a changed (new) pass.

Sorry for my bad enlgish.

Abe1 01-29-2007 10:02 PM
Quote:
Originally Posted by GiaNNi (Post 1169773)
I want to know if any of my moderators change his password, because they cant do it, (internal forum team rules).
There is a usergroup option to log old passwords in vb. Maybe this can help you. It logs it encrypted but maybe keeps a date.

Lovinmysailor 02-06-2007 07:08 PM
When I click on the Log Manager it tells me "No log file defined in vBulletin Options" What do I do? TIA

Abe1 02-12-2007 12:09 PM
Quote:
Originally Posted by Lovinmysailor (Post 1176256)
When I click on the Log Manager it tells me "No log file defined in vBulletin Options" What do I do? TIA
Not sure what you mean.

PinkDaisy 02-14-2007 03:04 PM
Installed... we will see how it goes. So far I've tried to look into 2 accounts that I know have shared at least 1 from before, but it doesn't show anything ??

GeekDrew 02-14-2007 03:31 PM
Quote:
Originally Posted by PinkDaisy (Post 1182448)
Installed... we will see how it goes. So far I've tried to look into 2 accounts that I know have shared at least 1 from before, but it doesn't show anything ??
... what? All this modification does is write a log entry when someone logs in.

PinkDaisy 02-14-2007 03:53 PM
Oh. I thought i would show when they log into each others accounts..lol. Sory!!

GeekDrew 02-14-2007 04:02 PM
Quote:
Originally Posted by PinkDaisy (Post 1182493)
Oh. I thought i would show when they log into each others accounts..lol. Sory!!
For that, check here.

PinkDaisy 02-14-2007 04:13 PM
Quote:
Originally Posted by GeekDrew (Post 1182503)
For that, check here.
Yeah I have that... lol I dunno what I was thinking!! Thanks.. :D

lazytown 03-01-2007 11:40 PM
Has anyone else tried this edit below to the mod with 3.6.4? Does it work well?

-vissa

Quote:
Originally Posted by serg472 (Post 1062078)
Quick solution for those who want this mod to log cookie logins as well (UNOFFICIAL, UNSUPPORTED, USE AT YOUR OWN RISK etc.).

The only minor issue after the following modification is that when user logs in using a standart login form it will log this twice - as a standart login and a cookie login. I don't want to modify this hack too much, so I left it as it is.

1. Open product-log_logins.xml and find:
PHP Code:
<phrase name="reg_login" date="0" username="" version=""><![CDATA[Standard]]></phrase> 
add below:
PHP Code:
<phrase name="cookie_login" date="0" username="" version=""><![CDATA[Cookie]]></phrase> 
2. Open loginlog.php and find:
PHP Code:
else if ($log['logintype'] == 'modcplogin')
{
    $log['logintype'] = $vbphrase['mod_login'];
} 
add below:
PHP Code:
else if ($log['logintype'] == 'cookie')
{
    $log['logintype'] = $vbphrase['cookie_login'];
} 
3. Open includes/class_core.php and find:
PHP Code:
// or maybe we can use a cookie..
if (($gotsession == false OR empty($session['userid'])) AND $userid AND $password AND !defined('SKIP_SESSIONCREATE'))
{
 
    $useroptions = (defined('IN_CONTROL_PANEL') ? 16 : 0) + (defined('AVATAR_ON_NAVBAR') ? 2 : 0);
    $userinfo = fetch_userinfo($userid, $useroptions, $languageid);
 
    if (md5($userinfo['password'] . COOKIE_SALT) == $password)
    {
        $gotsession = true;
 
 
 
        // combination is valid
        if (!empty($session['sessionhash']))
        {
            // old session still exists; kill it
            $db->shutdown_query("
                DELETE FROM " . TABLE_PREFIX . "session
                WHERE sessionhash = '" . $this->registry->db->escape_string($session['sessionhash']). "'
            ");
        }
 
        $this->vars = $this->fetch_session($userinfo['userid']);
        $this->created = true;
 
        $this->userinfo =& $userinfo; 
add below:
PHP Code:
//LOGINS HACK - START
$db->query_write("INSERT INTO " . TABLE_PREFIX . "logins (userid, username, ipaddress, phpdate, logintype) VALUES (" . $this->userinfo['userid'] . ", '" . $db->escape_string($this->userinfo['username']) . "', '" . $db->escape_string(IPADDRESS) . "', " . TIMENOW . ", 'cookie')");
//LOGINS HACK - END 
4. Reinstall product.

GeekDrew 03-01-2007 11:41 PM
Quote:
Originally Posted by vissa (Post 1193761)
Has anyone else tried this mod below to the mod with 3.6.4? Does it work well?

-vissa
Yes, it works perfectly on 3.6.4 for me.

lazytown 03-02-2007 01:13 AM
Quote:
Originally Posted by vissa (Post 1193761)
Has anyone else tried this edit below to the mod with 3.6.4? Does it work well?

-vissa

The edit to include cookies (not part of the original mod) does not work properly for me. Or perhaps it works but not as it should. For example, I'm seeing 20 entries for the same user in 5 minutes (apparently as they go from page to page). Those are not cookie logins, they are just cookie sessions. I was hoping it would take into account when they were last inactive (for the cookie timeout) and not create so many duplicates. Essentially this is now logging every page access by every user, which on a huge forum like mine will fill up super fast and take up resources.

-vissa

GeekDrew 03-02-2007 02:13 AM
I just double checked my installation, and it is definitely *not* doing that. I then checked the code... and it should *definitely* not be doing that, if your session management is working right -- I don't think that it should authenticate against the cookie unless the session does not already exist (which is the ($gotsession == false or {blahblahblah}) parameter surrounding where this is placed). Are you sure that you put it in exactly the right spot, and you didn't by chance put it below the two closing curly brackets (})?

lazytown 03-02-2007 02:25 AM
Thanks for the reply -- I'll double check, but I'm pretty sure it's in the right spots. I do have vbseo installed which may change things up a bit.

-vissa

lazytown 03-02-2007 02:30 AM
By the way, I'm noticing this happening mostly on accounts that are using AOL (proxy/cache) and the IP address changes almost every minute (I do have IP info and proxy to real IP installed).

-vissa

GeekDrew 03-04-2007 05:53 PM
In that case (just brainstorming), the AOL accounts might be not maintaining the session, and are instead authenticating against the cookie on every page load... which sounds like it would be a nightmare. I've not experienced that on my forum, and I also have quite a few AOL users.

lazytown 03-05-2007 05:47 AM
Quote:
Originally Posted by GeekDrew (Post 1195641)
In that case (just brainstorming), the AOL accounts might be not maintaining the session, and are instead authenticating against the cookie on every page load... which sounds like it would be a nightmare. I've not experienced that on my forum, and I also have quite a few AOL users.
Do you use any of the mods I've mentioned (proxy to ip, vbseo, etc)?

-vissa

GeekDrew 03-05-2007 10:06 PM
Quote:
Originally Posted by vissa (Post 1196007)
Do you use any of the mods I've mentioned (proxy to ip, vbseo, etc)?

-vissa
No.

BigJimTheLug 03-05-2007 11:59 PM
This is great!

Installed.

Greek76 03-24-2007 06:14 PM
Downloaded it installed but I still dont see it. All I see at the statistics and log manager are the sameones that where their before. I dont log logins hack anywhere. Unless Im missing something lol.

Abe1 03-24-2007 11:37 PM
Quote:
Originally Posted by Greek76 (Post 1211229)
Downloaded it installed but I still dont see it. All I see at the statistics and log manager are the sameones that where their before. I dont log logins hack anywhere. Unless Im missing something lol.
Did you upload the xml file? You should see a link to log-logins. Also, check your database.

004 03-25-2007 07:12 PM
Quote:
Originally Posted by Greek76 (Post 1211229)
Downloaded it installed but I still dont see it. All I see at the statistics and log manager are the sameones that where their before. I dont log logins hack anywhere. Unless Im missing something lol.
Be sure you are uploading the files correctly.
I did the same thing :o

Greek76 03-26-2007 07:54 AM
Oops working now thanks.

Black Hole 04-12-2007 12:24 AM
Saturday - I got everything loaded and after closing AdminCP and logging back in, I could see a very short login list. - The hack worked.

Monday - I attempted to view the list and received a 404 error.
Tuesday - I attempted again.
Today - Same 404 error. I completely reinstalled the hack, logged out and back in and now it works and I see logs dating back to Saturday. I'm at a loss.

Abe1 04-12-2007 02:18 AM
Quote:
Originally Posted by Black Hole (Post 1225506)
Saturday - I got everything loaded and after closing AdminCP and logging back in, I could see a very short login list. - The hack worked.

Monday - I attempted to view the list and received a 404 error.
Tuesday - I attempted again.
Today - Same 404 error. I completely reinstalled the hack, logged out and back in and now it works and I see logs dating back to Saturday. I'm at a loss.
Maybe you had deleted the file?

Black Hole 04-12-2007 11:41 AM
Quote:
Originally Posted by Abe1 (Post 1225564)
Maybe you had deleted the file?
Nope....nothing deleted.

It happened again.

Last night I did a full uninstall and then a reinstall and everything worked as it's supposed to. I had a log dating back until Saturday when the hack was first installed.

This morning I log in and attempt to check the log, and I get the standard "HTTP 404 - File not found" error screen.

Everything else works and I don't see any other changes. I checked the control panel log and there are no entries after that install. :confused:

adwade 04-12-2007 11:51 AM
Quote:
Originally Posted by Black Hole (Post 1225865)
This morning I log in and attempt to check the log, and I get the standard "HTTP 404 - File not found" error screen.
Knowing oh so little of all this, could it be an Access Rights on your Server somehow?

Meanwhile, Abe1 I just wanted to say THIS MOD is working perfectly on my vB3.6.4 Many Thanxx!

Black Hole 04-16-2007 01:54 PM
Quote:
Originally Posted by adwade (Post 1225870)
Knowing oh so little of all this, could it be an Access Rights on your Server somehow?

Meanwhile, Abe1 I just wanted to say THIS MOD is working perfectly on my vB3.6.4 Many Thanxx!
If that was the case, why would it work the first time, but not the next day?

khris7199 04-17-2007 10:55 PM
Database error in vBulletin 3.6.5:

Invalid SQL:
ALTER TABLE `logins` ADD `logintype` TINYTEXT NOT NULL;

MySQL Error : Duplicate column name 'logintype'
Error Number : 1060
Date : Tuesday, April 17th 2007 @ 04:52:32 PM
Script : http://www.*******.com/admincp/plugi...=productimport
Referrer : http://www.*******.com/admincp/plugin.php?do=productadd
IP Address : XX.XXX.XX.XX
Username : forumadmin
Classname : vb_database


I had this installed on my site before. Had a db crash. Got everything back up went to install the product again and get this.

Any ideas. Thanks.

Abe1 04-17-2007 10:58 PM
Quote:
Originally Posted by khris7199 (Post 1230055)
Database error in vBulletin 3.6.5:

Invalid SQL:
ALTER TABLE `logins` ADD `logintype` TINYTEXT NOT NULL;

MySQL Error : Duplicate column name 'logintype'
Error Number : 1060
Date : Tuesday, April 17th 2007 @ 04:52:32 PM
Script : http://www.*******.com/admincp/plugi...=productimport
Referrer : http://www.*******.com/admincp/plugin.php?do=productadd
IP Address : XX.XXX.XX.XX
Username : forumadmin
Classname : vb_database


I had this installed on my site before. Had a db crash. Got everything back up went to install the product again and get this.

Any ideas. Thanks.
Can you uninstall then re-install?


All times are GMT. The time now is 01:02 PM.
Page 2 of 4 1 2 34
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01548 seconds
  • Memory Usage 1,864KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (6)bbcode_php_printable
  • (24)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete