vBulletin 3.8.7 PL2 AdminCP and ModCP constantly refreshing after login.

[Brexen]

Hi there,

My Forum is currently running vBulletin 3.8.7 PL2.

Recently, I have had an Issue with both the AdminCP and ModCP. They just constantly refresh after logging in.

I then backed-up my database and moved it to another domain with a fresh vBulletin...Ran fine no problems. I then copied the FTP to the new hosting...Nothing, absolutely fine. I ran a code to disable all Plugins on the main site...Still refreshes, so it's not to do with Plugins, Database or FTP.

I have tried multiple browsers such as Chrome, IE and FireFox and got the same result from all of them. I have asked my fellow admins if it's the case for them and they have said the same for them also.

Some things you may want to know;

Yes the AdminCP and ModCP links have been changed. No I haven't updated the config.php with the new names for these due to security.

We have a fake adminCP along with the real adminCP, the fake adminCP is linked to config.php and records any user data such as IP who attempt to enter it.

However...This is not the problem as it works fine on the back-up forum with the same FTP and Database. So I believe it to be a host problem and have contacted them already. Just wanted to know if anyone else had the same problem and if so, how they fixed it.

--------------- Added [DATE]1316274711[/DATE] at [TIME]1316274711[/TIME] ---------------

Ohh forgot to add, still waiting on reply from host.

[Lynne]

I have seen this before, but it was a host issue with some javascript they added to all pages that caused this.

No I haven't updated the config.php with the new names for these due to security.

What is the reasoning behind this? If you think someone is going to somehow read your config.php file to get the name of the admincp, then you'd have even bigger problems since that would mean they have server access.

[Brexen]

Originally Posted by Lynne

I have seen this before, but it was a host issue with some javascript they added to all pages that caused this.

What is the reasoning behind this? If you think someone is going to somehow read your config.php file to get the name of the admincp, then you'd have even bigger problems since that would mean they have server access.

Quite Simply; There are tools available to hackers that extract the config.php from the FTP without having server or FTP access.

It is possible, it involves a Kernal exploit and some other things i'm not really familiar with.