Email notification if someone attempts to access your Admin CP

This is my version of the hack that Firefly released for VB2.

VB3's standard log of failed admincp login attempts is a nice feature.. but since you get no instant notification, by the time you check the log it could be too late. Also, the log doesn't show which passwords the potential intruder is trying... If someone is close to guessing my password I wanna know about it!

What does it do? With this hack, when someone tries to login to your admincp or modcp you'll get an email that contains the username they tried, the password they tried, their ip address, hostname, # of strikes, referer, script, and the date & time of the attempt.

It will look something like this:

--------------------------------------------------
WARNING: Failed admin logon in vBulletin 3.0.1
--------------------------------------------------
Someone is trying to login to your Admin CP!

Username tried: JimbobJoe
Password tried: aCcEsS
IP Address: 67.13.27.156
Host: asd691917124.whatever.com
Strikes: 1/5
Referer: http://www.yoursite.com/forums/admincp/
Script: http://www.yoursite.com/forums/login.php
Date: Wednesday 28th of April 2004 07:50:02 AM
--------------------------------------------------

If the person who is attempting to access your CP happens to be registered & logged in, this line will also be included in the email:

vBulletin has identified this user as: (intruder's real username here)

(Thanks to AlexanderT for the idea for this addon.)


Update (1-4-05): A couple of users have expressed concern about this mod sending a plaintext password over http for all logins. This update (v1.1) addresses that concern by only sending the password for cplogins. To update just re-do the first step in the instructions for your vbulletin version (the first edit to adminfunctions.php). Or if you'd prefer that the attempted password not be sent at all simply skip the edits to adminfunctions.php.

If you don't recieve an email when testing, make sure you have the webmaster email set in the admincp (vBulletin Options + Site Name / URL / Contact Details). Also, sometimes it takes a while for the email to arrive. So give it plenty of time before screaming "it doesn't work"..

Still not working? Read this!

Credits: Thanks to the original creator of this hack (Chen) for the idea, and thanks to Boofo for helping me test it.

[Natch]

Great job EvilLS1

[high]* Natch installed and it works a charm![/high]

[EvilLS1]

Thanks Natch.

[LeonHartHVA]

I set "Use Login "Strikes" System" to "No". So does it work?

[EvilLS1]

Originally Posted by LeonHartHVA

I set "Use Login "Strikes" System" to "No". So does it work?

Yes it should work either way.

[Wifey]

Originally Posted by babolo

I caught someone with this hack and pm'd them and they were like im sorry and crap and they tried alot of times

Funny you should say that considering I caught YOU trying to log into my admincp the other day. Not very fun, is it?

I think it was the other way around babolo, you tried on MY site and I caught you and pmed you asking why to which you replied you thought you'd try to hack because people use stupid passwords...unless you installed this hack between yesterday and today and had someone try to log into your account "alot of times."

Or we're all living in an alternate universe. One of the three. I have the logs if anyone cares to see this hack in action.

[WEForums]

This is cool. Doubt anyone tries to login, but it's good just in case. Had the vB2 one installed as well. Obviously this one is better, though.

[Yahhoon23]

I know that this may not be the best place for this. But I have and love this admincp hack.

Is there anyway I can be notified when regular accounts are tried to break into as well?

Last night, my admin area was targeted and I was notified.

My Co-Admin was targeted but not thru the admin area. They tried accessing his account through the regular forum.

But without him telling me I'd have no idea if people were trying to break in etc and I don't need the wrong people trying to access other accounts. Especially when not everyone uses a secure password.

[mackers8923]

cool hack, *clicks install*

[EvilLS1]

Originally Posted by Yahhoon23

Is there anyway I can be notified when regular accounts are tried to break into as well?

Its possible but not practical b/c your inbox would be filled with notifications due to regular members mis-typing their password or username. To do something like that it would be a better idea to store failed logins in the database and let the admin view them in the control panel.

[Yahhoon23]

Yeah, that is true. Good Point.

I just was trying to think of a way so I am notified if there is someone trying to break in other accounts.

Due to the fact that my admincp account was targeted, and my co-admins regular forum account were targeted, I was trying to think of a viable way for me to know that said people are trying to break into various accounts other than the admincp.