vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.7 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=228)
-   -   Miscellaneous Hacks - Cyb - Login To User Account (https://vborg.vbsupport.ru/showthread.php?t=177947)

shamda 06-19-2008 09:17 PM

I installed the version of this hack for 3.6.7 when I was using 3.6.7. I decided to uninstall it. I have since upgraded to 3.7.1 and now to the patch 2 of 3.7.1. When I first installed 3.7.0 I created a new template which I use now. I have not installed this hack for 3.7.1.

Now for the problem. Someone is hacking my board. They are somehow taking control of other members accounts and posting threats all over my board. I am not sure how they are doing this. I have gone back and forth with my hosting company and we have sealed up all the security issues we can find. My guess is that the person is somehow using something from the hack to login as user that I had once installed. It seems to be acting just the same way. I have another hack that tells me if more than 1 member logs in from the same computer. Whenever an admin would login as a use with this hack it would trigger the duplicate login alert. When the hacker is taking over an account the same thing happens. I really think he is running something from my 3.6.7 version of the hack. Could this be possible? When I uninstalled it obviously there may be some files that remain on my server? Can anyone help with this?

srkrocks 06-20-2008 02:41 PM

Installed

redraider 06-20-2008 02:45 PM

this is weird, but whenever I use this mod, all my guests (including the spiders) get thrown off the forum ...anyone else faced the same thing?

redraider 06-20-2008 02:50 PM

Quote:

Originally Posted by shamda (Post 1553978)
I installed the version of this hack for 3.6.7 when I was using 3.6.7. I decided to uninstall it. I have since upgraded to 3.7.1 and now to the patch 2 of 3.7.1. When I first installed 3.7.0 I created a new template which I use now. I have not installed this hack for 3.7.1.

Now for the problem. Someone is hacking my board. They are somehow taking control of other members accounts and posting threats all over my board. I am not sure how they are doing this. I have gone back and forth with my hosting company and we have sealed up all the security issues we can find. My guess is that the person is somehow using something from the hack to login as user that I had once installed. It seems to be acting just the same way. I have another hack that tells me if more than 1 member logs in from the same computer. Whenever an admin would login as a use with this hack it would trigger the duplicate login alert. When the hacker is taking over an account the same thing happens. I really think he is running something from my 3.6.7 version of the hack. Could this be possible? When I uninstalled it obviously there may be some files that remain on my server? Can anyone help with this?

Have you changed the password for administrators? Also see if he has added himself as an administrator to your administrators group. Check the ip addresses of the administrator and try to block those ips.

TrIn@dOr 06-20-2008 03:25 PM

Full Spanish(AR) translation

shamda 06-21-2008 09:22 AM

I am the only one showing in the admin group. I had changed my password. Even if he did get in as an admin how would he use this hack if i uninstalled it? Is it possible?


Quote:

Originally Posted by redraider (Post 1554594)
Have you changed the password for administrators? Also see if he has added himself as an administrator to your administrators group. Check the ip addresses of the administrator and try to block those ips.


Valter 06-21-2008 09:31 AM

You are able to see in Moderator log who used this hack, on which users and when.

redraider 06-23-2008 01:33 PM

Quote:

Originally Posted by redraider (Post 1554586)
this is weird, but whenever I use this mod, all my guests (including the spiders) get thrown off the forum ...anyone else faced the same thing?

an update: after I disable this mod, the bots are back hungry and interested in the website. Is it just me or anyone else has seen similar effect? Please help

Valter 06-23-2008 02:17 PM

Quote:

Originally Posted by SonniE (Post 1553115)
Hi i love this mod used it on 3.6.8 only issue i ever had with it is if im logged into some1s acc for awhile it doesnt log me back into my admin acc instead it keeps me in that users account is this a bug? fixable?

Session expires because of inactivity.

redraider, it's bug. I will fix it today and release updated version.

Valter 06-23-2008 04:09 PM

v2.2 - Jun 23. 2008.
-Added option to disable logs
-Added option to switch to vB 3.6.x compatibility mode
-Fixed bug (session lost for target user when you go back to admin)
-Fixed bug (sessions lost for guests/bots when you login as another user)
-Made several compatibility improvements

To upgrade:
-Import XML as product, allow overwrite


All times are GMT. The time now is 12:20 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01255 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (4)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete