Administrative and Maintenance Tools - vB3.5 Email notification if someone attempts to access your Admin or Mod CP

vB3.5 Email notification if someone attempts to access your Admin or Mod CP
Version 1.0.1
(By Boofo)

What does this modification do?
When someone tries to login to your Admin CP or Mod CP, you will get an email that contains the username they tried, the password they tried, their IP address, hostname, number of strikes, referrer, script, and the date & time of the attempt. It also will now distinguish itself in the message subject between a failed Admin CP attempt and a failed Mode CP attempt, so you will know right off which CP they tried to login to.

NOTE: To alleviate anyone getting upset about plain text passwords being transmitted from the server, the ONLY time a plain text password is sent, is when it is a failed login attempt. It is not stored on the server anywhere and no hashed passwords are ever revealed to anyone. I think it's good to know if anyone is getting close to what my CP password is so I can change it if necessary.

Credits:
Thanks to EvilLS1 for making the vB 3.0 version of this modification on which this update is based and released with permission.

Version Information:
Version 1.0.0 --Initial release
Version 1.0.1 --Fixed user name being wrong on a user attempt.


Installation overview:
--------------------------------------
Files to edit: (2)
--incudes/adminfunctions.php
--login.php


What it looks like in the Mod CP when an anonymous users tries to login:

-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Ned
Password tried: does this work?
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Monday, September 26th, 2005 at 8:22:29 am
-----------------------------------------------------

What it looks like in the Mod CP when a user from your site tries to login:

-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Boofo
Password tried: does this work?
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Monday, September 26th, 2005 at 8:22:29 am
-----------------------------------------------------
USER ATTEMPT: Your Forums has identified this registered user as: Boofo

[klaush]

Originally Posted by Andyrew

Should this work on 3.5.2 i have tried and cannot get it to work, i had it working on 3.5.0 and 3.5.1 :disappointed:

Yep, no problem at all! Do the installation as described and everything?s working like a charm.

[Andyrew]

Originally Posted by klaush

Yep, no problem at all! Do the installation as described and everything?s working like a charm.

It was working all the time, it was USER error, i was logging into my forums with a wrong password instead off trying to log into my Admincp :speechless:

[bobad]

Works great... a useful tool. Thanks
*installed*

[kassem]

Thanks for this hack, I've under 3.5.3 I hope it's works.

[IrPr]

works fine on 3.5.3 nice !

[Posof]

:squareeyed:

Where do i need make the changes so that my other admin receiv a e-mail to when they try with his Password..

Ore is it possible to add somany members groups that i want with this..

Thanks

:ermm:

[Megareus Rex]

Nice hack, and it actually displays the password this time (I remember on the 3.0 version, I couldn't get it to show the password that was tried).

[Hostboard]

I want to just log failed attempts to the ACP. If I just edit the incudes/adminfunctions.php will this be all I need to do?

[davis31b]

i noticed that on this hack it doesn't like putting in comments ie: <!-- hack here --> other than that it works great so if you have failed login attempts just delete the comments

[Hornstar]

I want to also know if someone is trying to login to a certain user, example (userid 1,2,3)

How would I change this so it can also find out if someone is trying to login to those users.

Thanks