Questions, questions....

[bitbender]

Boys and girls

It happens to us all, we build a decent place, peeps come and go, and lo and behold a turd decides that he is going to become a super hacker and try to trash your DB thru a posting bot...

So, you start seeing all these emails from db_mysql, bad password and such, and a session hash that's weird, and cannot be found, or no session hash at all. Example;

Database error in vBulletin :

Link-ID == false, connect failed
mysql error: Access denied for user: 'mydbusername@localhost' (Using password: YES)
Note: I changed the user id above for obvious display reasons- It's NOT mydbusername

mysql error number: 1045

Date: Friday 09th of May 2003 07:16:15 PM
Script: /vb22/usercp.php?
Referer:
-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Database error in vBulletin :

Link-ID == false, connect failed
mysql error: Access denied for user: 'mydbusername@localhost' (Using password: YES)

mysql error number: 1045

Date: Friday 09th of May 2003 06:43:57 AM
Script: /vb22/index.php? s = bedcecb47073caae6fb6513d7e5b249c
Referer:
-=-=-=-=-=-=-=-=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

I added some code to the email notify, along with a function to derive the REAL ip addy (as far as one can) to at least list the IP addy in the email, so that it can be properly added to Mr. rack's firewall, but I was wondering, is there a hack out here that already addresses this?? I did a search, and got rather an empty list.. :smoke:

I used a function I found at PHP.net to get the IP addy, and just called that sucka when I parsed the additional email message in db_mysql.

Is that about all a fella can do?? I really hate turd users who have perenially failed at self copulation, and have resorted to abusing what they cannot make for themselves, either by computer, or by hand. :cross-eyed:

[Boofo]

What code did you add to get the IP address and where did you add it?

[bitbender]

Twas your Link, boo, from a reccomend you pointed someone else at here at VBorg...

I just took it a step further and drilled down to the genenv function, and there was an example there, along wth some posts from peeps about. Third example down, there's a code snippet that has a Ip() and two other ip functions. I used that example, as it will chase the referred, and weed out the lan IP addy's.

Seems to work, but, I'm always open to new ideas.

[Boofo]

You'll have to refresh my memory on the link.

I'd be interested in seeing the code you came up with for this. Like you, I am always open to new and creative ideas.

[bitbender]

U got PM .