Miscellaneous Hacks - vB Dummy ACP 1.0.0

vB Dummy ACP

This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.


Features

• Acts just like real admincp login
• Can automatically defend against detection (explained below)
• Won't even allow real admin logins
• Easily create as many dummy acps as you like
• Will work without plugins enabled (partially)

Defense Against Detection

In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:

1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.

2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:

1. The login provided is actually wrong
2. The login provided is real, but an administration login


Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.

[valdet]

Very interesting. I might use this on April 1-st

[Alex LD]

No.. log of the people? IT doesn't send a PM to people who tried to login to an admin, that would be nice,

that said, I'm removing it because it serves no purpose if its not going to help me other then take up space on my server and trick people\

Also whats point of XML if you can't edit anything with it.

Sorry I don't like it and I could do a better job myself.

[Deceptor]

Originally Posted by Alex LD

No.. log of the people? IT doesn't send a PM to people who tried to login to an admin, that would be nice,

that said, I'm removing it because it serves no purpose if its not going to help me other then take up space on my server and trick people\

Also whats point of XML if you can't edit anything with it.

Sorry I don't like it and I could do a better job myself.

It's meant as a trick so they -never- crack your login, using Brute force or any other method for that matter. As for space on your server, unless your hosting package is limited to 10MB space, I don't see an issue with a file being a less than few KB.

You're more than welcome to do better yourself though.

[rzpvile]

Okay great app first off ignore any negative comments unless they make something better.

Here is what I am using this mod for:

Basically you leave this as your default admincp so you look like a noobish site owner and when a script kiddie gets mad at you for banning them or for whatever reason they try to "crack" your admincp thinking you're an idiot for leaving it at default when in fact it's a dummy cp so the tricks on them! so while they're trying to "crack" /admincp yours is actualy /customadmincp

[Zachery]

I think its an intresting idea, but a little htaccess and password protecting is far better than leaving some fake up.

Nice work though

[Deceptor]

Originally Posted by Zachery

I think its an intresting idea, but a little htaccess and password protecting is far better than leaving some fake up.

Nice work though

I agree, and there's no reason htaccess can't be applied to the real Admin CP

[Hornstar]

this could be okay if there was still a strike system attached to it.