vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Graveyard (https://vborg.vbsupport.ru/forumdisplay.php?f=224)
-   -   Administrative and Maintenance Tools - vB3.5 Email notification if someone attempts to access your Admin or Mod CP (https://vborg.vbsupport.ru/showthread.php?t=96921)

Ncturnal 08-18-2006 06:41 AM

It works in vB 3.6.0 as well. There was only a minor change in the instructions. In the 3.6.0 code they added ?do=login after login.php. Simply change the instructions for modifying adminfunctions.php as follows:


In incudes/adminfunctions.php

Find:
--------------------------------------

Code:

        <form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">

--------------------------------------
REPLACE it with:
--------------------------------------

Code:

<?php
        if ($logintype=='cplogin' OR $logintype=='modcplogin')
        {
                echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="document.forms.loginform.vbpassword.value=document.forms.loginform.vb_login_password.value; md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
        }
        else
        {
                echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
        }
?>

--------------------------------------
Find:
--------------------------------------

Code:

<input type="hidden" name="vb_login_md5password_utf" value="" />
--------------------------------------
BELOW it add:
--------------------------------------

Code:

<input type="hidden" name="vbpassword" value="" />
All of the instructions for the login.php edits did not change. Great hack!

wolfyman 08-18-2006 09:44 AM

thanks for the above information, I was just getting around to editing my previous hacks and that was one of my top questions!

the code to search for in the first edit is wrong, though.

first edit, find this:

Code:

<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">

phonexpo 08-18-2006 11:58 AM

Thanks guys I have this working on vB360 now, although I had to put a "," at the end of this code on the login.php on line 83;

Code:


'postvars' => TYPE_STR,


RaceJunkie 08-19-2006 01:04 AM

Working fine in 3.6

AngusMacGyver 08-25-2006 10:58 PM

It works on 3.6.0

blind-eddie 08-27-2006 05:17 PM

Will this work in 3.5.3?

blind-eddie 08-28-2006 04:49 PM

*bump*

Ncturnal 08-28-2006 11:36 PM

Yes. I used it in 3.5.2, 3.5.3, 3.5.4, and now 3.6.0.

blind-eddie 08-29-2006 12:56 AM

rgr,Thank You

brvheart 08-30-2006 01:32 PM

works great in 3.6 without having to make any adjustments to directions :) thanks boofo

curriertech 09-29-2006 02:17 AM

Working for me in 3.6.1 but it always says 'undefined' for the password (which is fine with me). :)

LostOne 09-29-2006 02:25 AM

On my old phpbb board someone tried and succeeded and messed up my whole board. This is quite the perfect hack for protection, I'll try the 3.6 version available and hope I won't mess the installation.

Thanks

PoetJA-1975 10-08-2006 08:31 AM

Thanx for this extra security - Much appreciation!

Jacquii.

adwade 10-31-2006 01:48 PM

I have never tried editing a PHP file before, and I must admit the structure of one was a bit foreign to me as I'm not a coder. However, following the instructions above for vB v3.6 (Thanxx Ncturnal & wolfyman) as carefully as I could...IT WORKED! So I now have this running on my install of vB v3.6.2

MANY THANXX Boofo for having developed this! :banana:

PoetJA-1975 01-21-2007 03:24 PM

Quote:

Originally Posted by Ncturnal (Post 1054852)
It works in vB 3.6.0 as well. There was only a minor change in the instructions. In the 3.6.0 code they added ?do=login after login.php. Simply change the instructions for modifying adminfunctions.php as follows:


In incudes/adminfunctions.php

Find:
--------------------------------------

Code:

        <form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">

--------------------------------------
REPLACE it with:
--------------------------------------

Code:

<?php
        if ($logintype=='cplogin' OR $logintype=='modcplogin')
        {
                echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="document.forms.loginform.vbpassword.value=document.forms.loginform.vb_login_password.value; md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
        }
        else
        {
                echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
        }
?>

--------------------------------------
Find:
--------------------------------------

Code:

<input type="hidden" name="vb_login_md5password_utf" value="" />
--------------------------------------
BELOW it add:
--------------------------------------

Code:

<input type="hidden" name="vbpassword" value="" />
All of the instructions for the login.php edits did not change. Great hack!

Thanx for the info - Works fantastically!:up:

Jacquii.

blind-eddie 01-22-2007 12:57 AM

You guys know this is in vb already in 3.6.4

Terminatoronly 01-22-2007 07:01 AM

great mod thanks boofo i will use it

PoetJA-1975 01-22-2007 08:13 AM

Quote:

Originally Posted by blind-eddie (Post 1164701)
You guys know this is in vb already in 3.6.4

nope - sure didn't

JAcquii.

dcpaq2xx 03-14-2007 01:39 PM

Quote:

Originally Posted by blind-eddie (Post 1164701)
You guys know this is in vb already in 3.6.4

Where do I find that at? How is it enabled or used?

Thanks

Doug

dcpaq2xx 03-14-2007 05:12 PM

Quote:

Originally Posted by blind-eddie (Post 1164701)
You guys know this is in vb already in 3.6.4

Yes but from what I see this mod is completely different from the default Vb version your referring to.

http://www.vbulletin.com/forum/showt...60#post1322160

Doug

blind-eddie 03-14-2007 08:42 PM

Exactly the same...Make sure your settings are correct...log in to your admincp, with wrong password.....then go check your email. You will have email of who it was & there ip.

dcpaq2xx 03-14-2007 08:43 PM

Yeah, but what I like about this here hack is that its restricted to just the admin seeing it, which I beleive is how it should be done. The members dont need to know this, this should be sent to the admin.

Doug

blind-eddie 03-15-2007 02:51 AM

dcpaq2, you would still be the only one who sees the email informing you that someone attemped to access your admincp.....You get emails regarding site info?

dcpaq2xx 03-15-2007 03:02 AM

Maybe Im thinking of the login strike system, 5 bad logins locks you out for 15 minutes and an email is sent to that user id. Myabe im getting the two confused.

Doug

dcpaq2xx 03-15-2007 01:05 PM

Blind-Eddie,

I did a test trying to login to the admin cp with a bad password and the system does log the attempt, but I dont receive any email letting me know about it and it doesnt even tell me what the password was that was trying to be use.

As far as I am concerned I think I am going to try this hack, it seems to be more thourough and more what I am looking for.

Seems as though the Vbulletin staff always leave out the most important stuff. :rolleyes:

Doug

benjaminbih 05-20-2007 05:43 PM

Installation Instructions:
--------------------------------------
In includes/adminfunctions.php

Find:
--------------------------------------

Code:

<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">
--------------------------------------
REPLACE it with:
--------------------------------------

Code:

<?php
        if ($logintype=='cplogin' OR $logintype=='modcplogin')
        {
                echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="document.forms.loginform.vbpassword.value=document.forms.loginform.vb_login_password.value; md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
        }
        else
        {
                echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
        }
?>

--------------------------------------
Find:
--------------------------------------

Code:

<input type="hidden" name="vb_login_md5password_utf" value="" />
--------------------------------------
BELOW it add:
--------------------------------------

Code:

<input type="hidden" name="vbpassword" value="" />
--------------------------------------

The Code changes in this mod for login.php don?t need to be changed! Its the same for vB 3.6.7

dcpaq2xx 05-20-2007 06:09 PM

Thank you for the heads up benjaminbih.

If you wouldnt have said anything I would not have even noticed that the code got wiped out in login.php by the 3.6.7 upgrade as well as having to add in extra code in the adminfunctions file as it is something that doesnt get used everyday.

A big thank you to you, and a big thank you to Boofo for offering this hack to us and keeping it up to date.

Doug

benjaminbih 05-20-2007 10:59 PM

Quote:

Originally Posted by dcpaq2 (Post 1251578)
Thank you for the heads up benjaminbih.

If you wouldnt have said anything I would not have even noticed that the code got wiped out in login.php by the 3.6.7 upgrade as well as having to add in extra code in the adminfunctions file as it is something that doesnt get used everyday.

A big thank you to you, and a big thank you to Boofo for offering this hack to us and keeping it up to date.

Doug

Oh i forget it :o


The Code changes in this mod for login.php don?t need to be changed! Its the same for vB 3.6.7

dcpaq2xx 05-20-2007 11:20 PM

Quote:

Originally Posted by benjaminbih (Post 1251744)
The Code changes in this mod for login.php don?t need to be changed! Its the same for vB 3.6.7

I did not say anything about code being 'changed' in login.php. I said the code got wiped out, big difference. :)

Doug

rjmjr69 05-21-2007 12:09 AM

Works just perfectly with 3.6.7 Thanks

Boofo 05-24-2007 05:36 PM

Since I am still running 3.5.4, I'm not sure what has changed in 3.6. If someone could let me know what instructions I need to upgrade, I will add the 3.6 version to this post, too. ;)

Nathan2006 08-12-2007 04:49 AM

Quote:

Originally Posted by Boofo (Post 1253950)
Since I am still running 3.5.4, I'm not sure what has changed in 3.6. If someone could let me know what instructions I need to upgrade, I will add the 3.6 version to this post, too. ;)


This is still working great for 3.68

I totally forgot about this :D

Email is still sending too.

PoetJA-1975 09-03-2007 03:07 AM

Yeppers - still works for 3.6.8 brilliantly!
Thanx again for sharing - should be a default feature!

Jacquii.

MB-Soft 09-10-2007 03:22 PM

Works great in vB 3.6.8 :)

Thanks!

brvheart 09-16-2007 02:09 PM

not working on 3.6.8 :(, MB what edits did you use?

Vman 01-03-2008 04:06 AM

DITTO!!! I just installed it in 3.6.8 and its not working, there are no error messages, but when attempted to make false login attempts, there were not email notifications sent!!!!!

Can someone PLEASE fix this minor issue since this a good hack/plug to have!!!!

Thanks

Boofo 01-31-2008 08:04 PM

This is working on 3.7.0 beta 4. I have posted the vb 3.7.0 beta 4 version in the 3.7 modifications area.

segwayon 05-23-2008 11:43 PM

One difference I noticed when installing in 3.6.8 was one of the lines I was supposed to find:

Quote:

<form action="../login.php" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">
And this was what I found in 3.6.8:

Quote:

<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">
I didn't alter any of the replacement code:

Quote:

... etc ... <form action="../login.php" method="post" ... etc ...
Should I have kept the same pattern in the form tag?

Boofo 05-23-2008 11:55 PM

Maybe you ought to go all out and install the 3.7 version of this hack which has the line you are looking for. ;)


All times are GMT. The time now is 04:53 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01458 seconds
  • Memory Usage 1,829KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (14)bbcode_code_printable
  • (10)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (39)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete