Email notification if someone attempts to access your Admin CP

This is my version of the hack that Firefly released for VB2.

VB3's standard log of failed admincp login attempts is a nice feature.. but since you get no instant notification, by the time you check the log it could be too late. Also, the log doesn't show which passwords the potential intruder is trying... If someone is close to guessing my password I wanna know about it!

What does it do? With this hack, when someone tries to login to your admincp or modcp you'll get an email that contains the username they tried, the password they tried, their ip address, hostname, # of strikes, referer, script, and the date & time of the attempt.

It will look something like this:

--------------------------------------------------
WARNING: Failed admin logon in vBulletin 3.0.1
--------------------------------------------------
Someone is trying to login to your Admin CP!

Username tried: JimbobJoe
Password tried: aCcEsS
IP Address: 67.13.27.156
Host: asd691917124.whatever.com
Strikes: 1/5
Referer: http://www.yoursite.com/forums/admincp/
Script: http://www.yoursite.com/forums/login.php
Date: Wednesday 28th of April 2004 07:50:02 AM
--------------------------------------------------

If the person who is attempting to access your CP happens to be registered & logged in, this line will also be included in the email:

vBulletin has identified this user as: (intruder's real username here)

(Thanks to AlexanderT for the idea for this addon.)


Update (1-4-05): A couple of users have expressed concern about this mod sending a plaintext password over http for all logins. This update (v1.1) addresses that concern by only sending the password for cplogins. To update just re-do the first step in the instructions for your vbulletin version (the first edit to adminfunctions.php). Or if you'd prefer that the attempted password not be sent at all simply skip the edits to adminfunctions.php.

If you don't recieve an email when testing, make sure you have the webmaster email set in the admincp (vBulletin Options + Site Name / URL / Contact Details). Also, sometimes it takes a while for the email to arrive. So give it plenty of time before screaming "it doesn't work"..

Still not working? Read this!

Credits: Thanks to the original creator of this hack (Chen) for the idea, and thanks to Boofo for helping me test it.

[Incendium]

Nice job. *clicks Install*

[mmw]

Nice hack cheers

[trekwarfare]

Nice! Thanks, will be installing this one shortly!

[DenzoForums]

ok.. of course i have to be the idiot that can't get this to work :ermm:

I made the changes exactly as said in the text file. I then attempted to login 2 times with wrong password..

I have waited 10- 15 minutes for the e-mail to showup.. Is this long enough.. or should i wait longer?

With the changes in place.. I am not getting any error messages or anything..

Thanks
Dave

[EvilLS1]

Originally Posted by AlexanderT

Nice hack. It could be extended by adding the username of the user (in case he was already logged in to the forum before) who tries to login.

Thats a great idea!

For those who have already installed and want to add this feature..

In login.php find:

        $iphostname = @gethostbyaddr(IPADDRESS);

Below it add:

        if ($bbuserinfo[userid]>0)
         {
           $realname = "vBulletin has identified this user as: $bbuserinfo[username] \r\n";
         }

Then find this code (2 places):

$message="Someone is trying to login to your admincp!\n\n $fusername $fpassword $fipaddress Host: $iphostname\r\n $fstrk $freferer $fscriptpath $fdate";

Replace both instances of the code above with this:

$message="Someone is trying to login to your admincp!\n\n $fusername $fpassword $fipaddress Host: $iphostname\r\n $fstrk $freferer $fscriptpath $fdate $realname";

I updated the instructions to include this. Thanks to AlexanderT for the idea.

[aloha]

Thank you... works like a charm

[EvilLS1]

Originally Posted by DenzoForums

ok.. of course i have to be the idiot that can't get this to work :ermm:

I made the changes exactly as said in the text file. I then attempted to login 2 times with wrong password..

I have waited 10- 15 minutes for the e-mail to showup.. Is this long enough.. or should i wait longer?

With the changes in place.. I am not getting any error messages or anything..

Thanks
Dave

Hmm.. What version of vb are you using? Heres a few things to try:

Make sure you have the webmasters email set in your admincp (under options).

Make sure you added the last bit of code in the instructions under both places.

Try re-applying all of the code changes in login.php.

Make sure your vbulletin mail system is working (run the test in the admin cp).

Keep in mind, you only get an email when someone tries to login to your admincp or modcp... This has no effect on any of the regular login forms.

[SexyGal]

How do you install hacks?

[alkatraz]

Fantastic idea!! thx

[DenzoForums]

[quoye]Hmm.. What version of vb are you using? Heres a few things to try:

Make sure you have the webmasters email set in your admincp (under options).

Make sure you added the last bit of code in the instructions under both places.

Try re-applying all of the code changes in login.php.

Make sure your vbulletin mail system is working (run the test in the admin cp).

Keep in mind, you only get an email when someone tries to login to your admincp or modcp... This has no effect on any of the regular login forms.[/quote]

see i told you i was an idiot.. i never set the webmasters e-mail address in the control panel. I thought it was referring to the config.php one..

AWESOME!! Love .. thanks!

Dave