vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.8 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=235)
-   -   Administrative and Maintenance Tools - Multiple Account Detection & Prevention (https://vborg.vbsupport.ru/showthread.php?t=199077)

BadgerDog 03-10-2009 08:11 PM

Hi ... :)

I'm currently running "Multiple account login detector (AE Detector)" on my v3.67pl1 site for last two years. Seems to work fine except AOL proxies always light it up like a christmas tree. :D

Could I un-install the above and move to this, or is my version of vBulletin too old, like me .. ;)

Thanks for any feedback.... :up:

Regards,
Badger

Kiros72 03-11-2009 10:49 AM

I have tested an earlier version of this modification with vBulletin 3.6.0 and it worked just fine. In theory, this latest version should work perfectly fine with any vBulletin version from 3.6 to 3.8.

If you have any problems, I can help you out. Also, if you install this modification and then chose to uninstall it, the IDstack cookies will remain intact, so you'll be able to switch back to the AE detector if you'd like. The only way that the cookies will lose their tracking information is if you do a cookie reset with my modification, but there's no real reason to use that nowadays.

BadgerDog 03-11-2009 11:23 AM

Quote:

Originally Posted by Kiros72 (Post 1765619)
I have tested an earlier version of this modification with vBulletin 3.6.0 and it worked just fine. In theory, this latest version should work perfectly fine with any vBulletin version from 3.6 to 3.8.

If you have any problems, I can help you out. Also, if you install this modification and then chose to uninstall it, the IDstack cookies will remain intact, so you'll be able to switch back to the AE detector if you'd like. The only way that the cookies will lose their tracking information is if you do a cookie reset with my modification, but there's no real reason to use that nowadays.

Thank you ... :up:

Appreciate your feedback and offer to help very much..... :)

I will install it and see what happens. I guess I bette un-install my current "Multiple account login detector (AE Detector)" first.

Regards,
Badger

BadgerDog 03-11-2009 12:16 PM

A follow up.... :)

Un-installed my current "Multiple account login detector (AE Detector)"

Installed v1.1.1 of your mod on v3.67pl1 and it went smoothly....

Checked options and decided to turn "Silent Mode" ON for now, until I understand how the mod works better. So, I'll just read reports for a bit before turning if OFF.... :D

BTW, you have some of the most thorough and well documented instructions, plus on-line "?" help by field assistance I've ever seen in any mod. Thank you for that. :up:

I already have over 6,000 members and we get about 1,100 logging in every 24 hours. Because we are a "collectors" oriented web site, we get a lot of father, son, wife type members with different user names, yet they all use the SAME computer, so at this point I'm trying to be safe than sorry and not screw up their access. I guess I need to go through the members list and find those folks, adding them to the "ignored users" list by individual ID?

Finally, I left the following OFF because that was your default setting, plus I'm not sure I fully understand the impact of turning them ON yet, but I'll work on that... :D

Quote:

IP Address Prevention
Whether or not to check for matching registration IP addresses for new registrants if no cookie is found. Yes No

Extended IP Address Prevention
Whether or not to check for matching IP addresses even after cookie information is found and used.
Looks like a great mod... appreciate your efforts ... :up:

I hope it works well with my v3,67pl1 as I have far too much customization to upgrade at this point.

Regards,
Doug (Badger)

Kiros72 03-11-2009 12:32 PM

Quote:

Originally Posted by BadgerDog (Post 1765681)
A follow up.... :)

Un-installed my current "Multiple account login detector (AE Detector)"

Installed v1.1.1 of your mod on v3.67pl1 and it went smoothly....

Checked options and decided to turn "Silent Mode" ON for now, until I understand how the mod works better. So, I'll just read reports for a bit before turning if OFF.... :D

BTW, you have some of the most thorough and well documented instructions, plus on-line "?" help by field assistance I've ever seen in any mod. Thank you for that. :up:

I already have over 6,000 members and we get about 1,100 logging in every 24 hours. Because we are a "collectors" oriented web site, we get a lot of father, son, wife type members with different user names, yet they all use the SAME computer, so at this point I'm trying to be safe than sorry and not screw up their access. I guess I need to go through the members list and find those folks, adding them to the "ignored users" list by individual ID?

Finally, I left the following OFF because that was your default setting, plus I'm not sure I fully understand the impact of turning them ON yet, but I'll work on that... :D



Looks like a great mod... appreciate your efforts ... :up:

I hope it works well with my v3,67pl1 as I have far too much customization to upgrade at this point.

Regards,
Doug (Badger)

Thank you for the complements :)

I would like to point out that if you have "Silent Mode" enabled, you will not get any reports. That's what is silent about it. If you want to get these reports of multiple accounts, turn "Silent Mode" off.

Since your site has numerous families in the community, I suggest creating some Usergroup ("Family Members") and adding this group to known family members as a Secondary Usergroup. Then you can add this Usergroup ID to the ignore list.

In a nutshell, there are IP address options because some members may clear their cookies or use a different browser in order to register another account. Without the IP address checks, a user could get away with this, but with the checks, they have far less of a chance unless they go weeks without logging in or have a very dynamic IP address.

Good luck, and please let me know if my modification works well on your vBulletin 3.6.7 PL1 board ;)

Edit:

My bad. "Silent Mode" will only send reports rather than taking action. Thank you for bringing that up in an email :)

titodj 03-13-2009 01:11 PM

Ok it seems to be working now.. at least part.
It detects and post the multiple log in's, but it does not place the new created accounts in the specified usergroup.

This are my settings...

* Move to Specific Usergroup
* Silent Mode Off
* Prevention Usergroup 42 (dupped acc group)

Am I missing something?

BlueNinjaGo 03-13-2009 06:44 PM

Installed and it works great.... Excellent!

Kiros72 03-13-2009 07:48 PM

Quote:

Originally Posted by titodj (Post 1767188)
Ok it seems to be working now.. at least part.
It detects and post the multiple log in's, but it does not place the new created accounts in the specified usergroup.

This are my settings...

* Move to Specific Usergroup
* Silent Mode Off
* Prevention Usergroup 42 (dupped acc group)

Am I missing something?

Please turn on verbose mode and post one of the prevention reports here along with your vBulletin version.

titodj 03-13-2009 11:46 PM

this two had an acc and just opened a new one.

vBulletin 3.7.3 Patch Level 1

Code:

[ :: Verbose Information :: ]

[ Cookie Information ]

Cookie Used: IDstack
Raw Data: ,44465,
Clean Data: 44465

[ Capture Information ]

Caught by: Cookie

[ Verbose Messages ]

[ Dev Information ]

Verbose Message Bitfields: 0

Code:

[ :: Verbose Information :: ]

[ Cookie Information ]

Cookie Used: IDstack
Raw Data: ,20560,
Clean Data: 20560

[ Capture Information ]

Caught by: Cookie

[ Verbose Messages ]

[ Dev Information ]

Verbose Message Bitfields: 0


Kiros72 03-14-2009 11:10 PM

Alright, now were those login detections or were they registration preventions?

Login detections are just detections at the moment. Only registration prevention will actually do something about it.

By the way, I'm not sure if you're suggesting that the two detections above are related, but it looks like they are totally different.

titodj 03-15-2009 02:12 AM

Exactly... the system detected the log in of two different users (not related to each other) using multiple accounts

But the thing is that it did not prevented them to open two accounts, sending the new account to the dupe acc group.

In other words, the detection part, is working, but I cant make the prevention part to work.

Kiros72 03-15-2009 02:21 AM

Quote:

Originally Posted by titodj (Post 1768401)
Exactly... the system detected the log in of two different users (not related to each other) using multiple accounts

But the thing is that it did not prevented them to open two accounts, sending the new account to the dupe acc group.

In other words, the detection part, is working, but I cant make the prevention part to work.

I don't believe that this is the case, but I can test it for you. Please give me your forum's web address.

kronnos 03-15-2009 07:23 AM

will this work with 3.6?

Kiros72 03-15-2009 02:28 PM

Yes, it should work just fine with vBulletin 3.6 and 3.7 and 3.8 installations.

kronnos 03-15-2009 03:35 PM

Excellent mod. It would probably take me a day or to fully figure out what all the option so so can I get a little summary of what it does for what i need.

Lets say, there is a user who is banned but then gets another IP address and tries to register a new account, will this mod be able to stop him?

nikosb 03-15-2009 05:32 PM

Yes,
work fine with vBulletin 3.8.1

thank you

TSHNOFX 03-15-2009 09:27 PM

For some reason the server load went from a measly 0.88 to 2.52 while the mod was enabled. Does to do any scans or anything?

titodj 03-16-2009 04:51 AM

Quote:

Originally Posted by Kiros72 (Post 1768407)
I don't believe that this is the case, but I can test it for you. Please give me your forum's web address.

Sent by PM

Quote:

Originally Posted by TSHNOFX (Post 1769081)
For some reason the server load went from a measly 0.88 to 2.52 while the mod was enabled. Does to do any scans or anything?

Is it checking IP's?

Kiros72 03-17-2009 11:39 AM

Quote:

Originally Posted by kronnos (Post 1768800)
Excellent mod. It would probably take me a day or to fully figure out what all the option so so can I get a little summary of what it does for what i need.

Lets say, there is a user who is banned but then gets another IP address and tries to register a new account, will this mod be able to stop him?

Since the primary method of tracking is through cookie, the person will still be caught if they use the same browser and don't touch their cookies. The IP address checks are meant for a backup (in case a user clears their cookies). Some cases cannot be helped, but with the cookie and IP address checks, most of them people will be caught (even if they don't think that they will be).

Quote:

Originally Posted by nikosb (Post 1768921)
Yes,
work fine with vBulletin 3.8.1

thank you

Awesome :)

Quote:

Originally Posted by TSHNOFX (Post 1769081)
For some reason the server load went from a measly 0.88 to 2.52 while the mod was enabled. Does to do any scans or anything?

If you have a high volume of registrations each day, and you have IP address checks enabled, this could definitely raise the average server load. Also, enabling verbose mode for the reports will also raise the server load.

Last but not least, reporting through thread uses more queries than reporting through PM, so you might want to switch to the PM method and drop the thread reporting.

Quote:

Originally Posted by titodj (Post 1769353)
Sent by PM



Is it checking IP's?

Gracias :)

titodj 03-17-2009 05:38 PM

Well the Plug in its working.
And I really want to thank you for all your help.

Regards...

Kiros72 03-18-2009 08:42 AM

Not a problem. I'll update the known issues to include this newly found complication.

Ciao

Makaveli007 03-20-2009 09:11 PM

thanks installed

physiart 03-21-2009 09:26 AM

Hi all, great mod, congrats to Kiros and all coders who contributed to this.

I have a slight problem with the mod. Although it works fine, I never get any PMs when multiple registrants are trying to register; they are only trasnfered to the proper usergroup.

My settings are correct, I have set the mod as follows:

Registration Prevention: Move to Usergroup, Except Banned Users
Silent Mode: No
Ignore Child Accounts: No
IP Address Prevention: Yes
Extended IP Address Prevention: Yes

Multiple Account Reporter: 1 (admin)
Report by Private Message: Yes
Recipients of Private Messages: 1;otheruserid;otheruserid
Report by New Thread: No
Verbose Mode: Yes

I run it on vb 3.8.1 PL1. Why don't I get any PMs?
Any help will be appreciated. Thanx in advance!

P.S. Before that I used the two separate mods that were combined to make this one, and there was no problem with the PMs.

Kiros72 03-22-2009 04:00 AM

The PM reporting is a little different than everything else. You should use the actual usernames (not User ID numbers) when setting the recipients and separate each username with a semicolon.

physiart 03-23-2009 07:28 AM

Thanks Kiros, that did it!

SnapOff Racing 03-25-2009 07:54 AM

is there a way to run a scan for all registered users to match up duplicate ip's and have it auto-ban the 2nd+ account associated with the same ip as the first account?

BlueNinjaGo 03-25-2009 01:13 PM

To be honest, I don't think there is a way to run a scan. But, AFAIK, when a user logs in with an alt, it'll detect it. So say User A and User B are the same person. User B hasn't logged in since you installed the mod. User A logs in all the time. During an argument, User B logs in to back up User A, then it should automatically detect it and let you know. AFAIK, it won't automatically ban/move that user into any group.

This is just from my experience with the mod.

BlueNinjaGo 03-25-2009 01:17 PM

*Feature Request *

Can there be a feature added that notifies new registrants who are moved into a "awaiting moderation" usergroup via PM why they were moved.

Basically, just when someone is moved into the "awaiting moderation" usergroup, it sends him/her a PM explaining why, and instructing the user to PM the Administrator with an explanation.

Kiros72 03-25-2009 07:47 PM

Quote:

Originally Posted by SnapOff Racing (Post 1776508)
is there a way to run a scan for all registered users to match up duplicate ip's and have it auto-ban the 2nd+ account associated with the same ip as the first account?

Unfortunately, no. Besides that, such a feature would cause horrible mayhem on larger forums. Many people will have the same IP address when they register because some ISPs (AOL for instance) use proxies.

I might develop something like this to use a time inclusion setting, but I'd need to do some research and figure out how to not lock up the database tables during such scans. So I'm afraid we won't be seeing anything of the sort for quite some time =/

Quote:

Originally Posted by BlueNinjaGo (Post 1776647)
*Feature Request *

Can there be a feature added that notifies new registrants who are moved into a "awaiting moderation" usergroup via PM why they were moved.

Basically, just when someone is moved into the "awaiting moderation" usergroup, it sends him/her a PM explaining why, and instructing the user to PM the Administrator with an explanation.

Hmmm, well what I did when I was a webmaster, I set vBulletin to put up a notice for a specific Usergroup informing them that their account was disabled because it was recognized as a multiple account. This is why it's good to have MADP send users to the moderated Usergroup instead of the "Awaiting Activation" Usergroup.

So if you put a notice up for the Usergroup, then they'll be notified every time they're logged in and on every page.

Does that help at all? :)

BlueNinjaGo 03-25-2009 07:57 PM

Quote:

Originally Posted by Kiros72 (Post 1776941)
Does that help at all? :)

I'm sorry, but your use of common sense is disturbing... :)

mark370 03-26-2009 04:05 PM

Could do with a bit of advice / help here if you can please.

If we have someone joinup and we delete there account [for not meeting our requirments] and that user signs back up with the same username [wether it be straght away or months after] the mod is flaging that user as a Multiple Account ?

Also i should point out that when searching for any members Ip in ACP the search results are showing Super Admin , Admins, mods and registered users all having the same ip as the user that was searched for, this doesnt happen on every search result its intermitent at the minute, ovbiously this is a error and needs to be addressed thing is ime not sure if its to do with this mod or not but weve only just noticed it happening so i dont how long it actualy been like this.

Any help with the above issues would be great.


Here is a Example:

Multiple login detected from "Username".

Other recognized logins for this user are:

Code:

[ :: Verbose Information :: ]

[ Cookie Information ]

Cookie Used: IDstack
Raw Data: ,"previous Id",
Clean Data: "previous Id"
[ Capture Information ]

Caught by: Cookie

[ Verbose Messages ]

- The number of recognized users is different from the amount of ID numbers found in the account-counting cookie.

[ Dev Information ]

Verbose Message Bitfields: 1

thanks Mark

Kiros72 03-26-2009 05:40 PM

Yes, I came across that issue (the first one) just recently as well. I think that it might be time for a small update to version 1.1.2.

The IP address issue might be caused by the user that you have set to post/send reports. That's also something that I was planning on fixing for 2.0.0, but since more than one improvement can be made in short order, I'll probably release version 1.1.2 sometime soon.

1.1.2 won't fix the past IP address matches, but it will keep it from happening again.

mark370 03-26-2009 06:51 PM

Quote:

Originally Posted by Kiros72 (Post 1777655)
Yes, I came across that issue (the first one) just recently as well. I think that it might be time for a small update to version 1.1.2.

The IP address issue might be caused by the user that you have set to post/send reports. That's also something that I was planning on fixing for 2.0.0, but since more than one improvement can be made in short order, I'll probably release version 1.1.2 sometime soon.

1.1.2 won't fix the past IP address matches, but it will keep it from happening again.

Funny you should say this as we have all the reporting coming from the S-Admin account which is also one of the accouts that is mainly showing up in the Ip search results problem :(

Question: Is there any sql cmds or something that we could do to clear/ reset all the ip's ready for the 1.1.2 fix so we can get the search back to normal again ?
because how it is at the minute its very hard to distinguish between members who have genuine accounts and who have multiple accounts as we could be repremanding members who are showing to have multiple accounts through ip search.

thanks for your help Mark

BlueNinjaGo 03-26-2009 07:03 PM

Perhaps disable the IP checking part of the mod until then? Rely on cookies? Not as effective, I know, but a temporary solution.

Hornstar 03-26-2009 08:08 PM

I don't think a simple sql command could fix that, but maybe kiros can come up with something because I too would like to restore my username showing up on all the multiple accounts.

Kiros72 03-29-2009 01:36 AM

Hmm. I think that this issue might be solved by deleting (physically removing) all of the reports that were sent by the reporter. I haven't yet tried this, so if someone is willing to, please let me know how it goes.

MindStar 03-30-2009 08:33 AM

You could use SQL to find all the posts made by the reporting account whose title matches the reporting message (wildcarded) and then change the IP address of those posts.

PHP Code:

SELECT FROM `postWHERE `userid` = AND (`titleLIKE 'Multiple Registrant%' OR `titleLIKE 'Multiple Login%'); 

I suggest that IP address for reporting should be 0.0.0.0 to avoid confusion.

The following SQL query should reset the IP Address to 0.0.0.0 and assumes that the userid that you are using to make the reports is 1

PHP Code:

UPDATE `postSET `ipaddress`='0.0.0.0' WHERE `userid` = AND (`titleLIKE 'Multiple Registrant%' OR `titleLIKE 'Multiple Login%'); 

You could refine this further by selecting posts that were made in a particular forum.

MindStar 03-30-2009 01:59 PM

To fix the plugin so that it reports multiple logins or registrations from the same account from a NULL IP address ("0.0.0.0"), open detection.php and insert the following code at line 280

PHP Code:

$threaddm->do_set('ipaddress'"0.0.0.0"); 

before

PHP Code:

$threaddm->save();
unset(
$threaddm); 


Kiros72 03-31-2009 05:49 AM

Great thinking, MindStar. However, everyone please remember to use the actual User ID that you have the reporter set to if it's different than 1.

I'll be releasing version 1.1.2 with fixes to both the detection and registration soon.

Kiros72 03-31-2009 06:36 AM

Okay, the new version has been uploaded.

Thanks for your patience, everyone.


All times are GMT. The time now is 11:59 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.02585 seconds
  • Memory Usage 1,868KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (3)bbcode_code_printable
  • (4)bbcode_php_printable
  • (15)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (40)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete