Administrative and Maintenance Tools - [DBTech] vBSecurity v2 (vB4)

vBSecurity: What is it?
vBSecurity keeps a watchful eye over your forum even when you are not there, and has the capability to alert you of any suspicious activity.

Uses

vBSecurity is the ideal product for forums that are concerned about security, or wish to be alerted when something suspicious happens.
It keeps a watchful eye on your configuration file, ensuring that it does not get modified by mods or plugins.
Another important feature is the ability to add a secondary login, unique to each administrator, that is required before accessing the AdminCP. Ideal for forums where multiple administrators may share login information, or where administrators may log in from public computers.
Add in quick settings for the most vital vBulletin Options and Usergroup password settings, vBSecurity can easily be called one of the most comprehensive security suites for your vBulletin forum.

-------------------------------------------------------------------------------------------

If you like this mod please hit the button to the right ---->

Please remember to click the, button to the right if you installed the mod ---->

What does 'Marking As Installed' do ?

* It helps you to stay on top of updates - members who have installed modifications will be notified by us whenever new updates are available.

* For security issues - vbulletin.org will contact all members who have installed a modification whenever a security issue is brought to their attention.

* Marking a modification as installed also helps us know how many people are using our work, giving us extra incentive to provide more features and new modifications.

We appreciate the support!
-------------------------------------------------------------------------------------------

Priority support & Product Demos available at: http://www.dragonbyte-tech.com

-------------------------------------------------------------------------------------------

Translations available @ our forum
Support for translations handled by the translator in its respective threads only.

-------------------------------------------------------------------------------------------

Major Features
Administrator Security: .htaccess-like logins for your administrators means that even if they use the same password on multiple sites, malicious users still need a fresh, unique password to log in.

Security Watchers: Keep an eye on the most important aspects of vBulletin: config.php tampering, AdminCP / User Account access attempts, vBulletin Options, User Data, Usergroup Settings and Usergroup Permissions.
Detailed changelogs available for each watcher dealing with changes.
IP Ban, User Ban, Email alerts and temporary forum closure options available for each watcher individually.

Lite
* Searchable list of all AdminCP access attempts
* Searchable list of all failed login attempts
* Searchable list of administrator changes for areas governed by the Security Watchers
* vBOption: IP Address whitelist for AdminCP access
* vBOption: Separate "Closed Reason" for closures that happened due to potential security breaches
* Quick setting page for the most important vBulletin Options security settings
* Quick setting page for the most important Usergroup security settings
* Security Watchers: General - config.php Variable Tampering, AdminCP Access Attempts
* Security Watchers: Logins - Failed Logons, Failed Mass Logons
* Security Watchers: vBOptions - vBulletin Active, Reason For Turning vBulletin Off, Banned Email Addresses, Banned IP Addresses, Use Login "Strikes" System, Whitelisted IP Addresses, Whitelisted IP Addresses - Exclude Super Administrators
* Security Watchers: User Data - User Name, Password, Email, Primary Usergroup, Additional Usergroups, Reputation Level, Warnings, Infractions, Infraction Points, Receive Admin Emails
* Security Watcher Actions: 2 thresholds with individual configuration options, IP Ban / User Ban / Email Webmaster / Close Forum options available for each Watcher option listed above. Some watcher options may not have all actions.

Pro
* Optional .htaccess-like login on a per-administrator basis
* Settings Snapshots - take a "snapshot" of how the vBulletin Options look at the time, instant restore by clicking Load on a previous snapshot
* Security Watchers: Usergroup - Password Expiry, Password History, every usergroup permission group, every "value" permission
* IP Guard: Administrator IP Address authorisation scheme (similar to Steam Guard) - Require email verification for new IP addresses to access the AdminCP, per-administrator disable

-------------------------------------------------------------------------------------------
This mod displays a copyright notification in the footer of all pages which includes:

• 1 Link to DragonByte Technologies homepage
• 1 Link to Product Description page of this modification

[ForceHSS]

Originally Posted by 409industries

Awesome mod. Purchased the pro version.

Wish i had found this a long time ago to enforce password complexity requirements during registration / password changes.

Support is awesome too, they listened to some of my suggestions regarding the mass password reset feature and got the changes implemented very quickly. :-)

Yes it is a very good mod I use many of their pro versions myself

[DragonByte Tech]

vBSecurity v1.1.3

Changes to Existing Features:

Mass Password Reset

• Now uses a more secure method of generating temporary passwords
• Enables greater security for users, avoiding brute force attacks on their passwords before the passwords can be changed

Fillip

[GreyGhost]

EDIT: Answered on DBTech forums. ANSWERED HERE

I'm getting the following message when I try to change any vBSecurity settings in ACP.
----------
"Forbidden

You don't have permission to access /admincp/vbsecurity.php on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request."
----------

vB 4.2.2 - vBSecurity v1.1.3

Fresh vB install with a hand full of members and forums/post imported from phpbb3

Only other mod installed is DBTech Copyright Management v2.1.1
Have now disabled both in Manage Products but am still unable to change any settings.

8-)

UPDATE: Just installed vBShout and I'm getting the same Forbidden message when I try to change the settings.
"Forbidden

You don't have permission to access /admincp/vbshout.php on this server."

So I uninstalled vBSecurity and deleted all the files but this hasn't fixed it.

All other vB settings changes work fine, it's only DBTech mods that produce the error.

I've looked for any .htaccess and there's none and checked file permissions which all DBTech .php files are set to 0644 where all other vB .php files on the server are 0600.

8-/

[woodmj]

After ugrading to the latest version there seems to be a problem when a standard password change is effected. Please could you advise? The below error is displayed :

Database error in vBulletin 4.2.2:

Invalid SQL:
UPDATE user SET
salt =
passworddate =
password =
dbtech_vbsecurity_forcenewpass =
WHERE userid = ;

MySQL Error : Unknown column 'dbtech_vbsecurity_forcenewpass' in 'field list'
Error Number : 1054
Request Date : Monday, April 20th 2015 @ 10:08:45 AM
Error Date : Monday, April 20th 2015 @ 10:08:45 AM
Script : /profile.php?do=updatepassword
Referrer : /profile.php?do=editpassword
IP Address :
Username :
Classname : vB_Database_MySQLi
MySQL Version : 5.5.41-0ubuntu0.14.04.1

[ForceHSS]

Originally Posted by woodmj

After ugrading to the latest version there seems to be a problem when a standard password change is effected. Please could you advise? The below error is displayed :

Database error in vBulletin 4.2.2:

Invalid SQL:
UPDATE user SET
salt =
passworddate =
password =
dbtech_vbsecurity_forcenewpass =
WHERE userid = ;

MySQL Error : Unknown column 'dbtech_vbsecurity_forcenewpass' in 'field list'
Error Number : 1054
Request Date : Monday, April 20th 2015 @ 10:08:45 AM
Error Date : Monday, April 20th 2015 @ 10:08:45 AM
Script : /profile.php?do=updatepassword
Referrer : /profile.php?do=editpassword
IP Address :
Username :
Classname : vB_Database_MySQLi
MySQL Version : 5.5.41-0ubuntu0.14.04.1

The error means you are missing a table but that table was and is not there and never was in this plugin so I dont see how you are getting the error unless you edited the xml

[woodmj]

Have not edited the XML. This just came about after upgrading to the latest release from the DB site. I believe it's tied in with one of the new features in the new release.

[ForceHSS]

This wait for the coder to reply as they will know but I cant see that table or if its part of a table name so this see what the coder has to say

[DragonByte Tech]

vBSecurity v1.1.4

New Features:

Scheduled Password Reset

• Enforces a password reset for a user upon next login, via the User Manager in the ACP
• Mimicks the "Password Expiry" feature in vBulletin
• Great for forcing users to provide a more secure password

(Pro) Mass Scheduled Password Reset

• Enforces a password reset for every account upon next login
• Mimicks the "Password Expiry" feature in vBulletin
• Great for forcing users to provide a more secure password

Fillip

[DragonByte Tech]

Originally Posted by woodmj

After ugrading to the latest version there seems to be a problem when a standard password change is effected. Please could you advise? The below error is displayed :

alter table user add dbtech_vbsecurity_forcenewpass tinyint(1) unsigned not null default '0'

Fillip

[ForceHSS]

Originally Posted by woodmj

After ugrading to the latest version there seems to be a problem when a standard password change is effected. Please could you advise? The below error is displayed :

Database error in vBulletin 4.2.2:

Invalid SQL:
UPDATE user SET
salt =
passworddate =
password =
dbtech_vbsecurity_forcenewpass =
WHERE userid = ;

MySQL Error : Unknown column 'dbtech_vbsecurity_forcenewpass' in 'field list'
Error Number : 1054
Request Date : Monday, April 20th 2015 @ 10:08:45 AM
Error Date : Monday, April 20th 2015 @ 10:08:45 AM
Script : /profile.php?do=updatepassword
Referrer : /profile.php?do=editpassword
IP Address :
Username :
Classname : vB_Database_MySQLi
MySQL Version : 5.5.41-0ubuntu0.14.04.1

Did not install the latest until now so I see the coder has put in the new table to the update