Version: 1.0.2, by Boofo
Developer Last Online: Jun 2012
Category: Administrative and Maintenance Tools -
Version: 3.7.x
Rating:
Released: 01-31-2008
Last Update: 02-02-2008
Installs: 172
Code Changes
No support by the author.
Email notification if someone attempts to access your Admin or Mod CP for vBulletin vB3.7.0 beta 4
Version 1.0.2
(By Boofo)
What does this modification do?
When someone tries to login to your Admin CP or Mod CP, you will get an email that contains the username they tried, their IP address, hostname, number of strikes, referrer, script, and the date & time of the attempt. It also will now distinguish itself in the message subject between a failed Admin CP attempt and a failed Mode CP attempt, so you will know right off which CP they tried to login to.
NOTE: Those who respectfully donate will be have access to the password version of this hack by sending me a PM after donation.
Credits:
Thanks to EvilLS1 for making the vB 3.0 version of this modification on which this update is based and released with permission.
Version Information:
Version 1.0.1 --Initial release
Version 1.0.2 --Removed password code for security reasons.
Installation overview:
--------------------------------------
Files to edit: (1)
--login.php
What it looks like in the Mod CP when an anonymous user tries to login:
-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Ned
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Thursday, January 31st, 2008 at 8:22:29 am
-----------------------------------------------------
What it looks like in the Mod CP when a user from your site tries to login:
-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Boofo
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Thursday, January 31st, 2008 at 8:22:29 am
USER ATTEMPT: Your Forums has identified this registered user as: Boofo
NOTE: If you do not click install, you do not need support.
Show Your Support
This modification may not be copied, reproduced or published elsewhere without author's permission.
I used to like the one that showed the attempted passwords lol
On a personal note: This was something i never liked about this modification. If you are an admin on many forums, you might by mistake try the password for board A to login to board B. If they password used is sent to the admin of Board A, then he might be able to "guess" your admin login for Forum B. I always refused to be an admin on a board that had this modification installed.
PS Boofo know my opinion on this, we already discussed that many years ago.
On a personal note: This was something i never liked about this modification. If you are an admin on many forums, you might by mistake try the password for board A to login to board B. If they password used is sent to the admin of Board A, then he might be able to "guess" your admin login for Forum B. I always refused to be an admin on a board that had this modification installed.
PS Boofo know my opinion on this, we already discussed that many years ago.
Only edit the one file in your forums directory. The hack states only 1 file edit plus most hacks usually have the full path to any files needing editing.
Interesting hack. If you use .htaccess to block AdminCP, does this do anything extra since the login.php is inside the forums directory?
Too bad that the plugin system requires vB to manage all these hooks.
Since vb is developed using svn and each line of code is probably logged somewhere, it would be so cool if they could come up with a way to dynamically create your own hooks with just vb file version and line number...I know, sounds really complicated but so is the hooks system
The Admin receives the notification, but the password feature has been removed in this version as it wasn't worth the headache of listening to a few people complain about the so-called security issues.
Email notification if someone attempts to access your Admin or Mod CP Details »»
About Developer
Visit Web Site
Code Changes 
No support by the author.
02-04-2008, 08:44 AM
