Version: 1.1, by EvilLS1
Developer Last Online: May 2021
Version: 3.0.5
Rating:
Released: 04-28-2004
Last Update: 01-07-2005
Installs: 239
No support by the author.
This is my version of the hack that Firefly released for VB2.
VB3's standard log of failed admincp login attempts is a nice feature.. but since you get no instant notification, by the time you check the log it could be too late. Also, the log doesn't show which passwords the potential intruder is trying... If someone is close to guessing my password I wanna know about it!
What does it do? With this hack, when someone tries to login to your admincp or modcp you'll get an email that contains the username they tried, the password they tried, their ip address, hostname, # of strikes, referer, script, and the date & time of the attempt.
It will look something like this:
Quote:
--------------------------------------------------
WARNING: Failed admin logon in vBulletin 3.0.1
--------------------------------------------------
Someone is trying to login to your Admin CP!
If the person who is attempting to access your CP happens to be registered & logged in, this line will also be included in the email:
Quote:
vBulletin has identified this user as: (intruder's real username here)
(Thanks to AlexanderT for the idea for this addon.)
Update (1-4-05): A couple of users have expressed concern about this mod sending a plaintext password over http for all logins. This update (v1.1) addresses that concern by only sending the password for cplogins. To update just re-do the first step in the instructions for your vbulletin version (the first edit to adminfunctions.php). Or if you'd prefer that the attempted password not be sent at all simply skip the edits to adminfunctions.php.
If you don't recieve an email when testing, make sure you have the webmaster email set in the admincp (vBulletin Options + Site Name / URL / Contact Details). Also, sometimes it takes a while for the email to arrive. So give it plenty of time before screaming "it doesn't work"..
However, on my forum the message is not sent until the next login event. In other words, if there's an unsuccessful login to admincp the email is not sent until someone logs into the main forum or the admincp (successfully or unsuccessfully).
It's as though a subsequent login event has to happen before the email notification occurs. Reinstalled the hack several times and tested thoroughly&repeatedly and this is the only conclusion I can come up with. My forum is not that active, especially in the evening. I can wait for hours to get the message, but as as soon as the next user enters the email is instantly sent.
vB303 on Win2kServ with PHP 433 MySQL 4.0.14b Deerfield WebSitePro.
dsmcd01,
Thats strange. On the previous pages of this thread someone mentioned that the Mailqueue system causes this. I didn't think that feature had any effect on the webmaster's email but it might be worth a try to turn it off if you have a slow board. If you want to see if it has any effect you can disable Mailqueue by going to admincp + server settings & optimization options. Other than that I can't think of anything that would be causing it.
Onkel_Tom,
Like Zelda-King said, that sounds like a missed file edit. Recheck all of your file edits, specifically those in adminfunctions.php.
dsmcd01,
Thats strange. On the previous pages of this thread someone mentioned that the Mailqueue system causes this. I didn't think that feature had any effect on the webmaster's email but it might be worth a try to turn it off if you have a slow board. If you want to see if it has any effect you can disable Mailqueue by going to admincp + server settings & optimization options. Other than that I can't think of anything that would be causing it.
That did the trick. Nice coding, and appreciate the assistance.
Email notification if someone attempts to access your Admin CP Details »»
About Developer
Visit Web Site
No support by the author.
08-17-2004, 10:12 AM
