Security Password for Admincp Hacks

Security Password for Admincp Hacks
by AnhTuanCool

Quick Stats:
Version 1.0.2
Tested full functionally on vBulletin 3.0.3
Time to install: no more than 2 min
File to edit: 4
Template to edit: None
Query to run: None

What this hack does:
Add an additional Password for ACP which is only known by insiders if intentional or unintentional someone could get your current account and do the bad things to your board, this password is assign to all current administrator and only can be changed by the superadministrator*.

Updated:
Upgrade from v1.0.0
Fixed bug that not allow normal member to login

Install:
I had includes the installation file so that you don't have to move much which is always discourage people with long instruction. Included the installation file, download and upload the two files onto your forumroot/admincp/ directory, run the file acppassword_install.php from your admincp and follow it closely.

Disclaimer:
Of course do not forget to back-up your file before uploading it.
Do NOT stop the installation while it isn't finished yet, this can cause you more trouble.

*Be a superadministrator
If you are the webmaster of your site, then you probably can use FTP or another way - edit the source code, you will need to edit the $superadministrators variable in the includes/config.php file to be a superadministrator or you can add some of trusted people, in order to reset this password.

To allow the administrators to access this page, edit the variable to include the user IDs of those administrators should have access, separating each user ID with a comma, like this:

$superadministrators = '1,25,57';

To allow only a single administrator to access this page, simply add that user's ID with no commas, like this:

$superadministrators = '1';

Note: This hack assigns the security password for all current administrators, so if you set someone to administrator, you will have to reset the password in order to allow him to ACP.

Screenshots:
Attachment

NOTE: INSTALL as your OWN risk. This hack has a serious side-effect on the login function. I'll try to fix it as soon as I can.

[parajsa]

Originally Posted by parajsa

The same problem, is there any way to make this prob disappears?

Thank u in advanced,

Greetings,
I found out the way that the Supermoderators, dont have to know the security password, and can enter their Control Panel without any problem, just do the followin:

In the login.php
Replace this code:

$password2 = iif($logintype = 'cplogin', &$vb_login_password2, '');

with this one:

$password2 = iif($logintype === 'cplogin' OR $logintype === 'modcplogin', &$vb_login_password2, '');

It works perfectly on my bord

[Eagle Creek]

<a href="https://vborg.vbsupport.ru/attachment.php?attachmentid=21131" target="_blank">https://vborg.vbsupport.ru/attac...chmentid=21131</a>

Wherefore I have to add a usergroup ID? I have three usergroups who can access my ACP (Admins, Smods, Owners of the site).

What do I have to fill in there?

[Jacko]

eek, script is full of bugs etc... instructions dont work in 3.0.3 and it messed up my includes files..

i un-installed untill it is finally released as 3.0.3 (good idea just needs fixing, and i suppose its just one bit of extra security.!)

[basskiller]

Why not just go through password protect directories. Then you can add a different username then your normal along with a seperate password. That way each member has two different usernames and passords for such directories as admincp/modcp or any other directory that need extra protection

[jad65]

Quick Stats:
Version 1.0.2
Tested full functionally on vBulletin 3.0.3
Time to install: no more than 2 min
File to edit: 4 which files i have to edit, and whare is the instruction ?
Template to edit: None
Query to run: None


Thanks

[PitchouneN64ngc]

./login.php (3 changes)
./includes/adminfunctions.php (1 change)
./includes/functions_login.php (3 changes)
./admincp/index.php (1 change)

These files are specified in the install script.

[jad65]

Thanks for reply

but i cant see any instruction,

what php change i have to do ?

can u see attached image, there is only 2 files to upload

Thanks for help

[skinwalker]

Originally Posted by Eagle Creek

https://vborg.vbsupport.ru/attachmen...chmentid=21131

Wherefore I have to add a usergroup ID? I have three usergroups who can access my ACP (Admins, Smods, Owners of the site).

What do I have to fill in there?

I have the same question..How to assign multiple user groups access?

[Eagle Creek]

Originally Posted by jad65

Thanks for reply

but i cant see any instruction,

what php change i have to do ?

can u see attached image, there is only 2 files to upload

Thanks for help

Just run the installerer. It will give you further instructions ,

[Gary King]

Anyone know if this script is good for 3.0.7?