Administrative and Maintenance Tools - Multiple Account Registration Prevention

*Note* This requires the Multiple Account Login Detector (AE Detector) in order to function. Big thanks to MPDev for the AE Detector hack, I have used/modified his code for use in parts of this mod (with permission).

*Note 2* My forum's servers are driving me nuts right now, big load times, etc and I'm about to cut myself from waiting for a page to load - so I haven't thoroughly tested all the new goodies I've added. If you find that something doesn't work please let me know.

Description
When an user registers, this plugin checks for the cookie that the AE Detector sets, if it exists, then this plugin will move the user to a specified usergroup (default is to the (COPPA) Users Awaiting Moderation usergroup). This will now check the user's IP address upon registration, and if it matches any others, it will place them in the Multiple Account (MA) usergroup . Also you have the option to ban the new account if the old account was banned.

You can turn the new features on/off accordingly in the settings area.


Install / Upgrade
Download the attached XML file, and import it at
Admin Control Panel > Plugins & Products > Manage Products > Add/Import Product

Remember to "Allow Overwrite" if you are upgrading.

Mod Info
1 - Query
3 - Phrases
2 - Plugins
0 - Template
0 - Template Edits


v1.0.2

• Fixed some major bugs that made the last release basically useless.

v1.0.1

• There is now an option prevent account registrations based on IP addresses.
• If a banned user attempts to create a new account, the new account will automatically be banned.
• Multiple account registrations will now send a PM or make a thread

v1.0.0

• Initial beta release

Please click "Install" if you have installed this mod! Thanks!

[NeitherSparky]

I just needed to post...we have a troll who just won't go away (he registered his 10th account a few minutes ago) and this add-on to the original mod has been wonderful. He is using AOL proxies about half the time to register and this mod catches him if he happens to use the same one he's used before (yes some legit users are coming up on the list when he registers, and yes some innocent new members may get caught, but I'm willing to take that risk; at least the accounts are frozen until I can get online and investigate. The guy is very easy to spot by his email addies and often his usernames).

So anyways, this mod is great. Although as stated before, the guy isn't being put in the banned group, he's always going into the users awaiting moderation group. I can live with that and all, but as is the option to move them to the banned group is basically useless.

[fci]

Found a bug:
if your includes/config.php has its db type set to mysqli, it breaks registration, e.g:

$config['Database']['dbtype'] = 'mysqli';

To fix it, you need to update the register_addmember_process under Manage Products to the following:

//if the cookie exists then we know that the user already has an account
if (isset($_COOKIE['IDstack']) && $vbulletin->options['marpon'])
{
	//set the usergroup to the one specified in options, or Users Awaiting Moderation
	$userdata->set('usergroupid', $vbulletin->options['marpusergroup']);
	
	//Automatic banning of previously banned users
	if ($vbulletin->options['marpautobanon'] && $vbulletin->options['marpbannedgroup'])
	{
		$marpautoban = FALSE;
		if($idstack = explode(',',$_COOKIE['IDstack']))
    {
			foreach ($idstack as $uid)
			{
				if (is_numeric($uid))
				{
					//check to see if any of the multiple users are banned
					if (is_member_of(fetch_userinfo($uid), $vbulletin->options['marpbannedgroup']))
						$marpautoban = TRUE;
				}
			}
			
			//ban the user
			if ($marpautoban)
				$userdata->set('usergroupid', $vbulletin->options['marpbannedgroup']);
		}
	}
}
//IP based prevention
else 
{
	if ($vbulletin->options['marpipon'])
	{
		$ip = $_SERVER['REMOTE_ADDR'];
		
		//check to see if another user exists with the same ip address
		if ($multip = $vbulletin->db->query_read("SELECT userid,username,ipaddress FROM " . TABLE_PREFIX . "user WHERE ipaddress='{$ip}'"))
		{
			if ($vbulletin->db->num_rows($multip) > 1)
			{
				$userdata->set('usergroupid', $vbulletin->options['marpusergroup']);
				
				$andids = " ". $vbulletin->userinfo['username'] ." ";
				$andusers = $vbulletin->userinfo['username'];
				
				while ($mip = $vbulletin->db->fetch_array($multip))
				{
					$andids .= ', ' . " ". $mip['username'] ." ";
					$andusers .= ','.$mip['username'];
				}
				$message = construct_phrase($vbphrase['marp_ipmessage'], htmlspecialchars_uni($vbulletin->userinfo['username']), $andids, $ip);
				$subject = construct_phrase($vbphrase['marp_subject'], htmlspecialchars_uni($vbulletin->userinfo['username']), $andusers, '[IP]');
	
	      // get admin users
	      $adminusers = split(",", $vbulletin->options['ae_adminusers']);
	      $fromuser = fetch_userinfo($vbulletin->options['ae_sender']);
	      $allowsmilie = '1';
	      $visible = '1';
	      
	      // create the DM to do error checking and insert the new PM (needs to be here)
	      $pmdm =& datamanager_init('PM', $vbulletin, ERRTYPE_SILENT);
				$ipaddress = $vbulletin->config['ae_adminip'];
	
	      if($vbulletin->options['ae_sendpm'] == '1')
	      {
	          $pmdm->set('fromuserid', $fromuser['userid']);
	          $pmdm->set('fromusername', $fromuser['username']);
	          $pmdm->set_info('reciept', false);
	          $pmdm->set_info('savecopy', false);
	          $pmdm->set('title', $subject);
	          $pmdm->set('message', $message);
	          $pmdm->set_recipients($vbulletin->options['ae_recipients'], $fromuser['permissions']);
	          $pmdm->set('dateline', TIMENOW);
	          $pmdm->save();
	      }
	
	      if($vbulletin->options['ae_startthread'] == '1' AND $vbulletin->options['ae_forumid'])
	      {
	          require_once(DIR . '/includes/class_dm_threadpost.php');
	
	          // setup variables
	          $forumid = $vbulletin->options['ae_forumid'];
	          $threaddm = new vB_DataManager_Thread_FirstPost($vbulletin, ERRTYPE_STANDARD);
	              
	          // insert thread
	          $threaddm->do_set('forumid', $forumid);
	          $threaddm->do_set('userid', $fromuser['userid']);
	          $threaddm->do_set('username', $fromuser['username']);
	          $threaddm->do_set('pagetext', $message);
	          $threaddm->do_set('title', $subject);
	          $threaddm->do_set('allowsmilie', $allowsmilie);
	          $threaddm->do_set('visible', $visible);
	          $tid = $threaddm->save();
	
	          require_once(DIR . '/includes/functions_databuild.php');
	          build_forum_counters($forumid);
	      }
	    }
		}
		
	}
}

it is changing "mysql_num_rows($multip)" to "$vbulletin->db->num_rows($multip)"

[-=Leb=-]

I think the time has come for a new update. most of us are using VB 3.7

[pcoskat]

Originally Posted by Leb

I think the time has come for a new update. most of us are using VB 3.7

Agreed.

Any word on whether or not this will be updated to 3.7?

[mark|3]

will there be a 3.7 version?

thanks

[randominity]

Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon

[NeitherSparky]

Originally Posted by randominity

Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon

Thanks man!!

[KURTZ]

Originally Posted by randominity

Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon

superb, i'll waiting for this ...

[peterpigman]

Originally Posted by randominity

Sorry, been MIA again, just upgraded to 3.7, so I'll see about updating this soon

???

[ccunnin71]

Any word on an update for 3.7?