Disable Failed Login Notifications

[amreboot]

I have searched everywhere, how do I disabled the "Failed Login Notifications" from being sent to members?

We are seeing a VERY large increased amount of malicious attempts from various countries in trying to gain access to members' accounts.
I have blocked several countries from the forum via the .htaccess file, but there are just too many countries doing this, including the USA.

At this point, I would like to simply disable the email notification from being sent.

How do I do this?

[kh99]

There is no setting to disable them. If you wanted, you could edit file includes/functions_login.php and in function exec_strike_user(), around line 109, find this code:

if ($strikes_user['strikes'] == 4)		// We're about to add the 5th Strike for a user
{
	if ($user = $vbulletin->db->query_first("SELECT userid, username, email, languageid FROM " . TABLE_PREFIX . "user WHERE username = '" . $vbulletin->db->escape_string($username) . "' AND usergroupid <> 3"))
	{
		$ip = IPADDRESS;
		eval(fetch_email_phrases('accountlocked', $user['languageid']));
//		vbmail($user['email'], $subject, $message, true);
	}
}

and add the two forward slashes (in red) before the vbmail line.

I'm also working on a couple of mods that might help with this. One will allow human verification on login (after a configurable number of strikes) so that hopefully the guessers (assuming they're automated) will not be able to generate 5 strikes. The other one will just allow you to disable the email sending without editing a file (and maybe also give options for other types of notification, if I can get around to it).

[John Lester]

Hmmm a soft 3 strike triggering a q & a before the hard 5 strike is a good idea KH

[amreboot]

kh99,

Thanks! That worked.

[Bill Thebert]

Is there a hack/mod that changes vBulletin 4.2.X to use the undisplayed email address (rather than the publicly displayed user handle) for login purposes?

Been looking but haven't found one yet.

[kh99]

There is one that allows users to log in with their email address, but it doesn't stop the username from being used. I remember looking at it briefly and thinking that there wasn't an easy way to disable login by username, but maybe I'll have another look.

[Bill Thebert]

Originally Posted by kh99

There is one that allows users to log in with their email address, but it doesn't stop the username from being used. I remember looking at it briefly and thinking that there wasn't an easy way to disable login by username, but maybe I'll have another look.

Yeah . . . I found one that allowed login via EITHER the email OR the handle.

And you're right, I want to DISABLE logging in by username and instead allow login ONLY by the hidden email address.

[kh99]

Oh, I almost forgot about this thread: https://vborg.vbsupport.ru/showthrea...me#post2540362

I did think of a way to do it (without that other mod) by making a file change. It does have that one problem I mentioned though.

[Bill Thebert]

Originally Posted by kh99

Oh, I almost forgot about this thread: https://vborg.vbsupport.ru/showthrea...me#post2540362

I did think of a way to do it (without that other mod) by making a file change. It does have that one problem I mentioned though.

Thanks. I think I'll give this a try.

But before I do, I'll have to give everyone a heads up.

[TheLastSuperman]

This mod should work for the same purpose too - https://vborg.vbsupport.ru/showthread.php?t=264192

There is also a post on here by former vb.org coordinator Marco where he shows you how to edit the file and change to email only login which is similar to what kh99 did in the post he linked you to above so use his example asd its more current .