Administrative and Maintenance Tools - AdminCP Firewall ~ Protect your AdminCP!

This is a mod I made to increase the security of your forum!

It has the following features:

• Email alert when an Admin logs into the CP
• IP Checking for Admins
• E-Mail if the IP isn't whitelisted
• Block user access to the AdminCP if the IP isn't whitelisted
• E-Mail if someone fails an AdminCP login

Those features will allow you to secure your AdminCP - and the only upload required is the product file!

So, what are you waiting for? Install now

Update History
Version 1.3.3:
PHP error should be fixed

Version 1.3.2:
Fixed - PHP error message when logging into AdminCP
Branding Removed

Version 1.3.1:
Fixed - text would be displayed on login failure page if failure email turned off or not from admincp

Version 1.3:
Added - Ability to have an email sent when someone fails an admincp login.
Added - Branding. Sorry! Any donation of ?2.50 or more will allow you to remove it

Version 1.2:
Added - Ability to specify IP's as CIDR ranges
Added - Ability to set both IP email and IP deny
Added - IP email will now tell you if any forum members registered using the unauthorized IP
Changed - Updated Admin Help Pages

Version 1.1:
Added - Ability to specify multiple email addresses
Added - Help entries for the admin options
Changed - IP's are separated with a line break now, not a comma.

Mark as Installed if Installed and Nominate for MOTM if you think this mod deserves it!

-----------

Donating

I kindly accept donations for my work. Donating will allow you to remove the branding. You can donate via paypal using the link on the right, or using bitcoin. Please PM me if you wish to donate using bitcoin.

This modification is free to modify and distribute with attribution. I no longer own a vBulletin license.

[Paul M]

Just adding the genereric disable hooks define to your config.php would also allow you back in.

PHP Code:

// Disable Hooks
define('DISABLE_HOOKS',true); 


[DemOnstar]

Installed.

[DemOnstar]

Originally Posted by Paul M

Just adding the genereric disable hooks define to your config.php would also allow you back in.

PHP Code:

// Disable Hooks
define('DISABLE_HOOKS',true); 


I did just that...

There is however a slim, coincidental hole with this idea as it will disable all the spam stuff, the protection stuff and everything else for the brief period where one has to do the changes in config.php and then gain access again to add another IP..

There is a vulnerability here... I like the password idea.

[ozzy47]

Originally Posted by Paul M

Just adding the genereric disable hooks define to your config.php would also allow you back in.

PHP Code:

// Disable Hooks
define('DISABLE_HOOKS',true); 


Paul, If I understand this mod correctly, it does not use hooks, it can not be disabled that way.

So the way to disable it is the way I said in post #83 and as theOP described in post #2

[DemOnstar]

Originally Posted by Paul M

Just adding the generic disable hooks define to your config.php would also allow you back in.

PHP Code:

// Disable Hooks
define('DISABLE_HOOKS',true); 


Originally Posted by ozzy47

Paul, If I understand this mod correctly, it does not use hooks, it can not be disabled that way.

So the way to disable it is the way I said in post #83 and as theOP described in post #2

I just added both to my config.php and left them commented out..
In that case, when the inevitable day comes where I have to use them, I know they are there...

I guess next I have to protect the includes folder..

[Bubble #5]

Originally Posted by DemOnstar

There is a vulnerability here... I like the password idea.

At a minimum it should have a password, but after thinking about it I'd prefer if the admin could fill out their own security question in the ACP, and then answer it. There are scripts that can guess passwords, but who's going to know the answer to your own security question but you?

[DemOnstar]

Originally Posted by Bubble #5

At a minimum it should have a password, but after thinking about it I'd prefer if the admin could fill out their own security question in the ACP, and then answer it. There are scripts that can guess passwords, but who's going to know the answer to your own security question but you?

This is a better idea..... Agreed. +1

[DemOnstar]

I had an email..

A user has logged into the AdminCP using an unauthorized IP address.

Ok, I had to check but it doesn't seem to be the case..
Perhaps re-wording the mail to

A user has attempted to log into the AdminCP using an unauthorized IP address.

I will try to do this myself...

EDIT: It was easy, it is all in languages and phrases...Shall see if it shows up the next time...:up:

[bigs15]

Mine is dynamic Ip so how does this mod help me?

[obglobal.net]

Could someone please help me with instructions on how to install this? I'd really like to add this mod as I've been hacked twice in the last 2 weeks.

Thanks very much.