AdminCP Firewall ~ Protect your AdminCP!
 

This is a mod I made to increase the security of your forum!

It has the following features:

• Email alert when an Admin logs into the CP
• IP Checking for Admins
• E-Mail if the IP isn't whitelisted
• Block user access to the AdminCP if the IP isn't whitelisted
• E-Mail if someone fails an AdminCP login

Those features will allow you to secure your AdminCP - and the only upload required is the product file!

So, what are you waiting for? Install now ;)

Update History
Version 1.3.3:
PHP error should be fixed

Version 1.3.2:
Fixed - PHP error message when logging into AdminCP :)
Branding Removed

Version 1.3.1:
Fixed - text would be displayed on login failure page if failure email turned off or not from admincp

Version 1.3:
Added - Ability to have an email sent when someone fails an admincp login.
Added - Branding. Sorry! Any donation of ?2.50 or more will allow you to remove it :)

Version 1.2:
Added - Ability to specify IP's as CIDR ranges
Added - Ability to set both IP email and IP deny
Added - IP email will now tell you if any forum members registered using the unauthorized IP
Changed - Updated Admin Help Pages

Version 1.1:
Added - Ability to specify multiple email addresses
Added - Help entries for the admin options
Changed - IP's are separated with a line break now, not a comma.

Mark as Installed if Installed and Nominate for MOTM if you think this mod deserves it!

-----------

Donating

I kindly accept donations for my work. Donating will allow you to remove the branding. You can donate via paypal using the link on the right, or using bitcoin. Please PM me if you wish to donate using bitcoin.

This modification is free to modify and distribute with attribution. I no longer own a vBulletin license.

FAQ

Q. What if my IP changes? How can I get into the AdminCP!

A. Just add this line to your config.php file:

Q. You say the mod will deny a user access to the AdminCP. How does it do this - what is shown to the user?

A. The user will see the standard AdminCP no permission message, called by print_cp_no_permission().

Q. Can I reuse this mods code?

A. Please PM me.

This works very well!.

Installed and set up, tested, received email when I logged in as I had it set to send on every log in.

Tried behind a proxy received the unauthorized email with username and IP address, also got the not authorized message.

Working fine 4.2 with vbseo.

Thank you!

No worries, glad it works well for you :up: :)

Can multiple email addresses be notified on logins?

I'll add this by the end of the day GMT :)

This has been added to the latest version :)

Liam

Installed and working great

would it be possible if it checks the IP address of registered members

for example if user gets denied message, the email will include the IP address and a registered member if it matches

Seems like a great MOD, I will have to go to all the locations I go to now and get the IP's before I install though :)

Thanks!

And what if your ip chances each time you restart your pc

yes that can happen only if you dont have static IP and the fact that your ISP doesnt control your IP

the only way to fool the system would be to clear all cookies and the forum will keep the cookie so even an IP change won't matter its picked up by the cookie

Then I suggest you use the email on login system and remain vigilant to those logins ;)

I will also try and make it so you can enter IP's as a CIDR mask - so as to whitelist multiple IP's at the same time

Hmm, clever! I'll see what I can do ;)

Liam

Installed for testing with thanks on 4.1.3 ...

Regards,
Doug

Sounds nice ,I will give it a try!

thanks for so nice mod

whats upend if i don't have access to that ip anymore ? and i want to change it to my new ip
can i log in to admin cp from other ip? how to do that ?
cheers

That's FAQ 1 ;)

See the second post :)

Nice mod. Installed. :)

That is in the newest version :)

I have now added the ability to set IP CIDR ranges :)

very well!!Works on vb 4.20 Pl3 thank you

Please don't forget to mark as installed :)

Liam

this is going to end config.php?

I use multiple ip

It would go anywhere in the config.php file, but on it's own line.

You can also disable the IP deny system in the options, which is recommended if your admins don't have static IP's.

Hi liamwli

in your next version can you do login attempts too, so it logs if someone also tries to login

Hmm, I'll certainly try....

with new version i get

Warning: Invalid argument supplied for foreach() in [path]/login.php(119) : eval()'d code on line 4
but testing it, the email does work on sending the correct info

https://vborg.vbsupport.ru/external/2013/04/56.png

Hmmm. Strange. What PHP version are you using, and when does this occur?

Ah, something I wouldn't have tested ;-) Glad you got it fixed and thanks for the nomination!

Liam

i cant get this to work i added 5 ip s an i get this

Sorry, you don't have permission to access the administrative controls on this page.

If you need to access this page, ask your lead administrator to enable your permissions for this page using the Administrator Permissions section of the control panel.

what do i put between the ips ? to separate ips......

IP address per line

Correct :)

See FAQ 1 if you can't access the admincp.

Anyone else seeing this error with v1.2 when logging into the AdminCP?

Warning: Invalid argument supplied for foreach() in [path]/includes/functions_login.php(377) : eval()'d code on line 78

I only noticed it this morning when logging in from my IPad?

Thanks... :)

Regards
Doug

Make sure all user accounts have an IP specified. Check the main admin account mainly.

Ok, but what's the point when I as an Admin, could possibly be logging in from various remote random IP addresses? I don't know in advance what they may be?

Are you saying that this mod will always generate HTML errors unless the IP address of the person logging in is always in the mod's data field?

Regards
Doug

I'm not referring to the mod settings, I'm referring to the user manager. Edit the main admin user and see if there is a value in the IP field.

:confused:

Are you referring to UserId #1 in the users file?

If so, then the registration IP address field for that user is blank...

Regards,
Doug

Yes, I am. Enter a valid value for the registration IP address and the error should vanish :P

127.0.0.1 will do ;)

Thanks .. :)

It won't let me put anything in that user ID as it says it's a protected user and it wants me to modify the config.php file ... :p

Regards,
Doug

Security conscious site owners, nice ;)