[DBTech] vBSecurity v2 (vB3)
 

vBSecurity: What is it?
vBSecurity keeps a watchful eye over your forum even when you are not there, and has the capability to alert you of any suspicious activity.

Uses

vBSecurity is the ideal product for forums that are concerned about security, or wish to be alerted when something suspicious happens.
It keeps a watchful eye on your configuration file, ensuring that it does not get modified by mods or plugins.
Another important feature is the ability to add a secondary login, unique to each administrator, that is required before accessing the AdminCP. Ideal for forums where multiple administrators may share login information, or where administrators may log in from public computers.
Add in quick settings for the most vital vBulletin Options and Usergroup password settings, vBSecurity can easily be called one of the most comprehensive security suites for your vBulletin forum.

-------------------------------------------------------------------------------------------

If you like this mod please hit the https://vborg.vbsupport.ru/external/2015/08/1.png button to the right ---->

Please remember to click the, https://vborg.vbsupport.ru/external/2015/08/2.png button to the right if you installed the mod ---->

What does 'Marking As Installed' do ?

* It helps you to stay on top of updates - members who have installed modifications will be notified by us whenever new updates are available.

* For security issues - vbulletin.org will contact all members who have installed a modification whenever a security issue is brought to their attention.

* Marking a modification as installed also helps us know how many people are using our work, giving us extra incentive to provide more features and new modifications.

We appreciate the support!
-------------------------------------------------------------------------------------------

Priority support & Product Demos available at: http://www.dragonbyte-tech.com

-------------------------------------------------------------------------------------------

Translations available @ our forum
Support for translations handled by the translator in its respective threads only.

-------------------------------------------------------------------------------------------

Major Features
Administrator Security: .htaccess-like logins for your administrators means that even if they use the same password on multiple sites, malicious users still need a fresh, unique password to log in.

Security Watchers: Keep an eye on the most important aspects of vBulletin: config.php tampering, AdminCP / User Account access attempts, vBulletin Options, User Data, Usergroup Settings and Usergroup Permissions.
Detailed changelogs available for each watcher dealing with changes.
IP Ban, User Ban, Email alerts and temporary forum closure options available for each watcher individually.

Lite
* Searchable list of all AdminCP access attempts
* Searchable list of all failed login attempts
* Searchable list of administrator changes for areas governed by the Security Watchers
* vBOption: IP Address whitelist for AdminCP access
* vBOption: Separate "Closed Reason" for closures that happened due to potential security breaches
* Quick setting page for the most important vBulletin Options security settings
* Quick setting page for the most important Usergroup security settings
* Security Watchers: General - config.php Variable Tampering, AdminCP Access Attempts
* Security Watchers: Logins - Failed Logons, Failed Mass Logons
* Security Watchers: vBOptions - vBulletin Active, Reason For Turning vBulletin Off, Banned Email Addresses, Banned IP Addresses, Use Login "Strikes" System, Whitelisted IP Addresses, Whitelisted IP Addresses - Exclude Super Administrators
* Security Watchers: User Data - User Name, Password, Email, Primary Usergroup, Additional Usergroups, Reputation Level, Warnings, Infractions, Infraction Points, Receive Admin Emails
* Security Watcher Actions: 2 thresholds with individual configuration options, IP Ban / User Ban / Email Webmaster / Close Forum options available for each Watcher option listed above. Some watcher options may not have all actions.

Pro
* Optional .htaccess-like login on a per-administrator basis
* Settings Snapshots - take a "snapshot" of how the vBulletin Options look at the time, instant restore by clicking Load on a previous snapshot
* Security Watchers: Usergroup - Password Expiry, Password History, every usergroup permission group, every "value" permission
* IP Guard: Administrator IP Address authorisation scheme (similar to Steam Guard) - Require email verification for new IP addresses to access the AdminCP, per-administrator disable

-------------------------------------------------------------------------------------------
This mod displays a copyright notification in the footer of all pages which includes:

• 1 Link to DragonByte Technologies homepage
• 1 Link to Product Description page of this modification

Looks like another great modificaton you guys.
Congrats and thanks for the share!

J.

Installed this as per the instructions given and it immediately killed my site.

When going into the settings in admincp, I got alot of depreciated errors showing at the top.

Main problem was the site would not load. All that would show was this error message:

Fatal error: Class 'VBSECURITY' not found in /var/www/vhosts/watchgeeks.net/httpdocs/dbtech/vbsecurity/hooks/global_complete.php on line 65

I turned the mod off and still could not load the site. The site would not load until fully uninstalling the mod.

I like what this mod is supposed to do...but it sure isn't working for me.

Nothing?

Same as above, just get the same error when installed.

Have had to uninstall.

Same as above, but i have just a white page !! No forum,No thing !

any forum works fine with mod installed??

thanks a lot
will try it

never like this mods (security or firewall)
i think anyone installed this mod stop working site.

i think only solution you have guys go to official site of DragonByte and wait to support or fresh install site software without this mods.

I'm very sorry for not replying, I forgot to subscribe to this thread so I was not alerted of new replies :(


vBSecurity v1.0.3:
Feature: Failed AdminCP Logins will now display the username the person tried and failed to login with
Fix: (vB3) Should now work correctly


Fillip

vBSecurity v1.0.4:
Feature: Added a block of text to Security Recommendations that discusses server security for WHM-based servers

Fillip

nice news
thanks DragonByte

I get this error on top:

Please try disabling all other addons as you may have a conflict.

Fillip

Any One Help Me Look This Error In Admincp

Are you running the i.s.s.w security product? If so, disabling it or changing its admin_global plugin execution order to 65535 may fix it.

If you are not running that product, please try disabling all other mods that run on the admin_global plugin location, then check if it's working. If it is, re-enable them one by one until you find the culprit. Once you've found the culprit, set its plugin execution order to 65535 and it should work :)


Fillip

Brother i have 1 Problem When I Set My And My Friend IP Address In White List Then After 1 Day My Friend IP Not Working And Show "This IP Not In White List" Then I Check His IP In My Forum His IP Change Then I add New IP This Is Daily Problem Help Me Please
Thanks In Advanced

That's working as intended :)


Fillip

vBSecurity v1.0.5:
Feature: The Affiliate ID setting now properly integrates with the link-back
Feature: Added Login Strikes Viewer that lets admins browse all failed logins
Fix: Bugs with the Admin Strikes Viewer that prevented natural browsing from working properly in some scenarios

Fillip

Affiliate ID link hotfix

Fillip

vBSecurity v1.0.6
Feature: Improved logging details for Control Panel actions
Change: Changed the Branding display method to inject itself into the copyright footer (underneath vBulletin copyright) instead of the page footer.
Change: Changed the Branding Free Key to a more secure key.

Fillip

Update

Hotfix: PHP 5.4 Compatibility fixes


This does not guarantee the mod is error free on PHP 5.4, but it will take care of the reported errors. Thank you all for your reports :)



Fillip

https://vborg.vbsupport.ru/external/2014/06/19.jpg

tell me this how to solve this pleas........ how to uninstall it forum cpanel..

Please also check your spam folder, it's possible the emails were added there.

Fillip

vBSecurity v1.1.2

ACP Access Log / Verifier

• Triggers an email alert if the IP addresses no longer match
• Sends email to the Webmaster Email listed in the vBulletin Options

Fillip

I just installed this and it went in like a charm. :cool: I was very careful to read everything and pay particular attention to all the options and warnings. Thanxx for such a fine Modification! I plan on using it for awhile to learn more of what-all it's capable of, then perhaps moving on up to the PRO version.

One question, the mod states:

Lite
* Security Watcher Actions: 2 thresholds with individual configuration options, IP Ban / User Ban / Email Webmaster / Close Forum options available for each Watcher option listed above. Some watcher options may not have all actions.

What does some watcher options may not have all actions mean?

The only issue I've found is when the Ban IP Address box is checked, it doesn't seem to perform the function. I am assuming the newly banned IP Addresses should appear in the standard Banned IP Addresses box of the vBulletin Options, or are they entered somewhere else?(...that I can't seem to locate :confused:)

I have the vb4 version and it does not add you need to do it manually

Does the PRO Version add Banned IP Addresses automatically, or is it manual as well?

Both versions add it manually. The only way it does not, is if either you didn't configure a number of intrusions needed for a ban to trigger, or the IP address is already in the banned IPs list.

Fillip

So what does checking the Ban IP Address box actually do then? The mod emailed me just fine, indicating that "The actions you have configured in the Security Center have been taken." but according to your reply above the mod will not perform the action of (automatically) adding a new IP Address to the Banned IP Address box in vB.(i.e. What difference does it make, whether the Ban IP Address box is checked or not?)

While my question still remains (above), educate me as to why it would not be a good idea to automatically Ban an IP Address that is attempting to login using -1' -and/or- user name as the actual username? These examples just seem like nefarious attempts to gain illegitimate access to a board by general (up to) no-good-doers.

vBSecurity v1.1.3

Changes to Existing Features:

Mass Password Reset

• Now uses a more secure method of generating temporary passwords
• Enables greater security for users, avoiding brute force attacks on their passwords before the passwords can be changed

Fillip

vBSecurity v1.1.4

New Features:

Scheduled Password Reset

• Enforces a password reset for a user upon next login, via the User Manager in the ACP
• Mimicks the "Password Expiry" feature in vBulletin
• Great for forcing users to provide a more secure password

(Pro) Mass Scheduled Password Reset

• Enforces a password reset for every account upon next login
• Mimicks the "Password Expiry" feature in vBulletin
• Great for forcing users to provide a more secure password

Fillip

vBSecurity v1.1.4 Patch Level 1

Bug Fixes:

• Fixed an issue where the mod wasn't initialised in the ModCP

Fillip

vBSecurity v1.1.4 Patch Level 2

Bug Fixes:

• Fixed an issue where the "IP Awaiting Authorisation" message would not display correctly in the DBSEO CP.

Fillip

vBSecurity v1.1.4 Patch Level 3

Bug Fixes:

• The "Unrecognised AdminCP Login From <new IP address>" email would be sent without a subject and body

Fillip

vBSecurity v1.1.5

New Features:

AdminCP Login Viewer

• Paginated list of all AdminCP logins
• Filter by User Name
• Filter by start/end date
• Filter by IP Address
• Change sort column

AdminCP Login Prune

• Only accessible to users with the required config.php permission
• Optional age limit

Fillip

vBSecurity v1.1.6

New Features:

Admin Strikes Viewer: Prune

• Only accessible to users with the required config.php permission
• Optional age limit

Changes To Existing Features:

General / Other

• Streamlined the phrasing for the ACP Logins and Admin Strikes interfaces

Fillip

vBSecurity v1.1.7

New Features:

Change Log Viewer: Prune

• Only accessible to users with the required config.php permission
• Optional age limit

Fillip