Miscellaneous Hacks - vB Dummy ACP 1.0.0

vB Dummy ACP

This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.


Features

• Acts just like real admincp login
• Can automatically defend against detection (explained below)
• Won't even allow real admin logins
• Easily create as many dummy acps as you like
• Will work without plugins enabled (partially)

Defense Against Detection

In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:

1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.

2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:

1. The login provided is actually wrong
2. The login provided is real, but an administration login


Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.

[ForumsMods]

Oh, thanks.

[glorify]

Originally Posted by dtv100

thanks you becoming one of my favorite coder.
gone try it with 3.7.4 and report later

all that secure a website is love by me.

Agreed. Man, Deceptor you are banging them out and have done some fresh new ideas. Kudos bro.

[ShadMan]

Cool idea..installed. Thanks!

[ade5675]

Great mod .... :up:


I sent you a PM about a little security 'concern' (I don't wanna make it public for now) ...... Look into it and let me know via PM.

I'll edit the post once verified.

[imported_stefan]

Sorry, but how is the system detecting that you are allowed to log in to the acp, because yo write even admin with right username and pw can't log in?

[RHWiRED]

You're meant to rename the real admin directory, and upload this "admincp" folder to your website, so people can't tell it's a fake one.

Thanks

[RvG2]

Originally Posted by Deceptor

ModCP and logs coming in next version

hi dear... would like to bump this

[|Jordan|]

This is a great system. I tried setting up something like this but failed.

It would be great if it could log IP's that try logging in and then add those IP's to the forum's ban list.

[fxwoody]

Really neat trick shot deceptor! I like it!

Installed and can't wait for the IP tracer