Administrative and Maintenance Tools - vB3.5 Email notification if someone attempts to access your Admin or Mod CP

vB3.5 Email notification if someone attempts to access your Admin or Mod CP
Version 1.0.1
(By Boofo)

What does this modification do?
When someone tries to login to your Admin CP or Mod CP, you will get an email that contains the username they tried, the password they tried, their IP address, hostname, number of strikes, referrer, script, and the date & time of the attempt. It also will now distinguish itself in the message subject between a failed Admin CP attempt and a failed Mode CP attempt, so you will know right off which CP they tried to login to.

NOTE: To alleviate anyone getting upset about plain text passwords being transmitted from the server, the ONLY time a plain text password is sent, is when it is a failed login attempt. It is not stored on the server anywhere and no hashed passwords are ever revealed to anyone. I think it's good to know if anyone is getting close to what my CP password is so I can change it if necessary.

Credits:
Thanks to EvilLS1 for making the vB 3.0 version of this modification on which this update is based and released with permission.

Version Information:
Version 1.0.0 --Initial release
Version 1.0.1 --Fixed user name being wrong on a user attempt.


Installation overview:
--------------------------------------
Files to edit: (2)
--incudes/adminfunctions.php
--login.php


What it looks like in the Mod CP when an anonymous users tries to login:

-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Ned
Password tried: does this work?
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Monday, September 26th, 2005 at 8:22:29 am
-----------------------------------------------------

What it looks like in the Mod CP when a user from your site tries to login:

-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Boofo
Password tried: does this work?
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Monday, September 26th, 2005 at 8:22:29 am
-----------------------------------------------------
USER ATTEMPT: Your Forums has identified this registered user as: Boofo

[curriertech]

Working for me in 3.6.1 but it always says 'undefined' for the password (which is fine with me).

[LostOne]

On my old phpbb board someone tried and succeeded and messed up my whole board. This is quite the perfect hack for protection, I'll try the 3.6 version available and hope I won't mess the installation.

Thanks

[PoetJA-1975]

Thanx for this extra security - Much appreciation!

Jacquii.

[adwade]

I have never tried editing a PHP file before, and I must admit the structure of one was a bit foreign to me as I'm not a coder. However, following the instructions above for vB v3.6 (Thanxx Ncturnal & wolfyman) as carefully as I could...IT WORKED! So I now have this running on my install of vB v3.6.2

MANY THANXX Boofo for having developed this! :banana:

[PoetJA-1975]

Originally Posted by Ncturnal

It works in vB 3.6.0 as well. There was only a minor change in the instructions. In the 3.6.0 code they added ?do=login after login.php. Simply change the instructions for modifying adminfunctions.php as follows:


In incudes/adminfunctions.php

Find:
--------------------------------------

	<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">

--------------------------------------
REPLACE it with:
--------------------------------------

<?php
	if ($logintype=='cplogin' OR $logintype=='modcplogin')
	{
		echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="document.forms.loginform.vbpassword.value=document.forms.loginform.vb_login_password.value; md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
	}
	else
	{
		echo '<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">';
	}
?>

--------------------------------------
Find:
--------------------------------------

<input type="hidden" name="vb_login_md5password_utf" value="" />

--------------------------------------
BELOW it add:
--------------------------------------

<input type="hidden" name="vbpassword" value="" />

All of the instructions for the login.php edits did not change. Great hack!

Thanx for the info - Works fantastically!:up:

Jacquii.

[blind-eddie]

You guys know this is in vb already in 3.6.4

[Terminatoronly]

great mod thanks boofo i will use it

[PoetJA-1975]

Originally Posted by blind-eddie

You guys know this is in vb already in 3.6.4

nope - sure didn't

JAcquii.

[dcpaq2xx]

Originally Posted by blind-eddie

You guys know this is in vb already in 3.6.4

Where do I find that at? How is it enabled or used?

Thanks

Doug

[dcpaq2xx]

Originally Posted by blind-eddie

You guys know this is in vb already in 3.6.4

Yes but from what I see this mod is completely different from the default Vb version your referring to.

http://www.vbulletin.com/forum/showt...60#post1322160

Doug