vb.org Archive - Administrative and Maintenance Tools - [4.1.x-4.2.x] Notify when config.php changes

vb.org Archive (https://vborg.vbsupport.ru/index.php)

- vBulletin 4.x Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=245)

- - Administrative and Maintenance Tools - [4.1.x-4.2.x] Notify when config.php changes (https://vborg.vbsupport.ru/showthread.php?t=288505)

liamwli

09-29-2012 10:00 PM

[4.1.x-4.2.x] Notify when config.php changes

1 Attachment(s)

If you want support, please mark as installed. If you install, please mark as installed :)

!!MOD UPDATED DUE TO INAVLID SETTING CONFIG - IT WILL WORK NOW!!

This mod is for vBulletin 4.1.x - 4.2.x

This mod will allow you to specify users that will get stopped if the config.php file is modified.

This is useful as a security tool, as most hackers would go for the config.php file.

You must enable it in it's settings before it will work.

Why Would I want/need this?
The config.php file contains the variables for super admins, as well as those with log pruning/viewing/sql executing permissions. If someone has ftp to your site, they will target this file so they can do whatever they want. Want to risk it? Install now!

Please note: This may cause a slight delay loading the page for people you choose to notify, as it calculates the md5 hash of the config.php file. It shouldn't be too much of an issue though.

Changelog

Version 2.2

Added - Setting to enter config.php location

liamwli

09-30-2012 06:21 PM

Reserved.

liamwli

10-01-2012 06:18 PM

Mod updated - settings not showing fixed.

GhostHunter2010

10-04-2012 03:26 PM

does it work on 4.2.0 mate

liamwli

10-06-2012 04:22 PM

Quote:

Originally Posted by GhostHunter2010 (Post 2370746)

does it work on 4.2.0 mate

Yup. That is what I am using it on.

Mrquarter2

10-06-2012 10:09 PM

I will try this out. Very nice.

Prashanth

10-07-2012 10:29 AM

it doesnt work 4 me as i dont use the default path for config file if possible u can query class_core to get the new path

TheSupportForum

10-07-2012 10:38 AM

personally i would just do this

.htaccess file in /include

Code:

RewriteEngine on



<Files 403.shtml>

order deny,allow

deny from all

</Files>



allow from domainipaddresshere

liamwli

10-07-2012 10:44 AM

Quote:

Originally Posted by Prashanth (Post 2371323)

it doesnt work 4 me as i dont use the default path for config file if possible u can query class_core to get the new path

I could add a setting for you to enter the path...

liamwli

10-07-2012 10:44 AM

Quote:

Originally Posted by simonhind (Post 2371325)

personally i would just do this

.htaccess file in /include

Code:

RewriteEngine on



<Files 403.shtml>

order deny,allow

deny from all

</Files>



allow from domainipaddresshere

That stops people going to it - not checking if it was modified.

TheSupportForum

10-07-2012 10:55 AM

Quote:

Originally Posted by liamwli (Post 2371330)

That stops people going to it - not checking if it was modified.

they will not be able to modify it if you restrict it to your own domains IP

liamwli

10-07-2012 11:07 AM

Quote:

Originally Posted by simonhind (Post 2371333)

they will not be able to modify it if you restrict it to your own domains IP

And if they have ftp....

Prashanth

10-07-2012 11:07 AM

that would be gr8

liamwli

10-07-2012 11:24 AM

Quote:

Originally Posted by Prashanth (Post 2371338)

that would be gr8

Ok, done.

TheSupportForum

10-07-2012 11:28 AM

Quote:

Originally Posted by liamwli (Post 2371337)

And if they have ftp....

lol now thats being stupid

1) they need to know your username & password

and plus you can You can restrict FTP access by IP through a .ftpaccess file

to do this you do the following

create a file called .ftpaccess

content

Code:

<Limit STOR>

  DenyAll

  Allow youripaddresshere

</Limit>

Prashanth

10-07-2012 12:08 PM

i think u forgot to update the eval code in admin function

Warning: md5_file([path]/includes/config.php) [function.md5-file]: failed to open stream: No such file or directory in

liamwli

10-07-2012 01:24 PM

Quote:

Originally Posted by Prashanth (Post 2371352)

i think u forgot to update the eval code in admin function

Warning: md5_file([path]/includes/config.php) [function.md5-file]: failed to open stream: No such file or directory in

Yes - I did, thanks :)

EDIT:

Hmm. I edited the options function, and now it won't work. I'm thinking that I can't make a call to the vbulletin options in vbulletin options...

EDIT 2: Fixed it, please download the file now :)

Prashanth

10-07-2012 02:41 PM

thanks it works finally

All times are GMT. The time now is 05:20 PM.

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.02412 seconds Memory Usage 1,752KB Queries Executed 10 (?)
More Information
Template Usage: (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (3)bbcode_code_printable (8)bbcode_quote_printable (1)footer (1)gobutton (1)header (1)headinclude (6)option (1)post_thanks_navbar_search (1)printthread (18)printthreadbit (1)spacer_close (1)spacer_open Phrase Groups Available: global postbit showthread	Included Files: ./printthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/class_bbcode_alt.php ./includes/class_bbcode.php ./includes/functions_bigthree.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete printthread_start bbcode_fetch_tags bbcode_create bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete printthread_post printthread_complete
Messages: