[QUOTE]Originally posted by timmiman
i had a problem, when i use the right password, he sends the email too! what do i wrong?

o.k thank for your reply, i exactly look at the code again.

sorry for my bad english, i am a german boy:)

ok i found the error. i had the code placed befor not behind the

if (md5($loginpassword)!=$bbuserinfo[password]) {

thanks for your 1a support here :D

[QUOTE]Originally posted by timmiman
ok i found the error. i had the code placed befor not behind the

if (md5($loginpassword)!=$bbuserinfo[password]) {

thanks for your 1a support here :D

Does anyone know where 2 put this in sessions.php of 2.0.3 because the 2.0.3 sessions.php doesnt have this line:

This is because 2.0.3 didn't have password encryption... The line should be

[QUOTE]Originally posted by GameCrash
This is because 2.0.3 didn't have password encryption... The line should be

PHP Code:

---

if ($loginpassword!=$bbuserinfo[password]) { 


---

I don't think I need to install this hack if I use htaccess to protect the directory ..correct?

Because if they don't get past the HTACCESS then they won't be able to trip the code to email me.

You might want to use this hack anyway. If someone does manage to get past the .htaccess password block, you'll never know just from that. But unless you use the same password for the .htaccess block as you do for your admin account, after they break past the .htaccess block, they'll trip this hack next.

I was just thinking about this the other night.

I have other directories on my webserver that are protected by .htaccess, and thought it would be nice to have people who were not able to authenticate within the 3 try limit to be sent to a custom error page that would also send me an email with some information about their IP address.

I know this is not related to vBulletin, but this hack is what got me thinking about that.

great lil hack! but is it only supposed to work if they type in my username? Thats the only way I got the email...

Sorry...wrong thread.

SWEET hack MAN :)

[QUOTE]Originally posted by Kathy
So I'm assuming it looks like this?

Code:

---

    if (md5($loginpassword)!=$bbuserinfo[password]) {
            $ipaddress=iif(getenv("REMOTE_ADDR")!="",getenv("REMOTE_ADDR"),$HTTP_HOST);
                        $iphostname = @gethostbyaddr($ipaddress);
                        $message="Someone is trying to login using your admin account!\n\nUsername he tried to use: $loginusername\nPassword he tried to use: $loginpassword (".md5($loginpassword)." in encryption)\n\nThe IP address is: $ipaddress\nThe host is: $iphostname";
                        mail($webmasteremail,"Warning: vBulletin Admin Login Tried",$message,"From: \"$bbtitle Admin CP\" <$webmasteremail>");

                        eval("standarderror(\"".gettemplate("error_wrongpassword")."\");");

---

In other words...leaving all the original code...and just adding those lines in the right place?

Thank you,

very cool hack!!!

matde

Great hack! I can't wait to use it. I just installed it down the the letter, but it doesn't seem to be working. I reread posts and read that the email doesn't come immediately, but it's been a day! :) Any possible reasons?

nice and easy ... thanks FireFly

Another job well done.

Thanks Firefly!

Doesn't seem to work for me... I am running version 2.2.1
Can anyone post the script for version 2.2.1?

Would be very gratefull,

Thanxxx

sweet hack :) very useful for security purposes

Why are some people following everything perfectly and getting a working hack, while others follow it perfectly and get nothing?

:confused:



Duke of Lion and I are getting nothing. I assume he's not getting errors (as I'm not), either. Is it version 2.2.1?

v2.2.1, yes.
If you did everything like you should I can't help you, sorry. :(

Ah well. Thanks anyway, Firefly. There are a couple hacks like this that give me problems, but nothing major. I'm not getting errors, so it's okay. I'm just not getting. *lol* For instance, I can't seem to get the 'locationbit' hack to work, or the 'flag' hack to work. Maybe it's my board. :s *lol*

Again, thanks anyway. Great job on all the hacks you do!

Ta m8 - works well :)

Any chance of having it email any failed attempt with any username?

James

Greak Hack :D

Doesn't work for me either.

My server is on PHP3, not 4. That wouldn't have anything to do with it, would it?

I'm running:

VBulleting 2.2.1 (the latest)
VBPortal (beta version)


P.S. Rose is a babe :D

Its very easy to implement and works perfectly. A nice, simple, and extremely effective hack! Thanks! :)

[QUOTE]Originally posted by Keith
Doesn't work for me either.

My server is on PHP3, not 4. That wouldn't have anything to do with it, would it?

I'm running:

VBulleting 2.2.1 (the latest)
VBPortal (beta version)


P.S. Rose is a babe :D

GREAT hack, thanks firefly again..another wonderfuly done and informitive hack. With this new hack I see everyone who is browsing around my administrator area, very useful for figuring out hackers

What about checking if the user has a boardcookie on his pc?
If so read out the username and send it in the email too! ;)

THAT Would be much better!

Hehe

Greetings

StarBuG

Excellent Hack works great.

Just for the record. I'm using vBulleting 2.2.1 and vBP 3.0 pr8 so works fine with that.

[QUOTE]Originally posted by StarBuG
What about checking if the user has a boardcookie on his pc?
If so read out the username and send it in the email too! ;)

THAT Would be much better!

Hehe

Greetings

StarBuG

Cough I changed the "he" to "they" lol

Username he tried to use: SugarChick
Password he tried to use: SugarChick

1) to be politically correct...and
2) unless I got a sex change I'm not a man and it looks kinda funny lol

lol imma go sit down in that corner over there now

Sweet hack ty! lol

Works great with 2.2.2 incase anyone was wondering ;)

Hmm, this worked fine on 2.2.1, but since I upgraded to 2.2.2 and reinstalled this hack, it stopped working!

Not working for me. Any ideas?

Can we get this to work on 2.2.2 anyone willing to give it a try?

Works great with 2.2.2

Thanks buddy!

Hi,

it doesn't work! What can I do?

Thanks!

Ban their ip address!

Hi,

i edited the session.php. If i try to log in the admin panel with wrong username and password, nothing happens! I don't get an email. Could it be that my hosters uses an other command for sending emails?

Thanks!