Administrative and Maintenance Tools - Duplicate IP Report by BOP5 (Checks for users sharing the same IP Addresses) VB3/VB4

Brought to you by BirdOPrey5
www.Qapla.com

Version 2.1.2 - Fixed MySQLi bug - Introduced GOLD/Premium Version
Version 2.1 - Added BBCode to Banned Users and Post Count Options, better debug info
Version 2.0 - Added report for Registration (User) IP Address Checking

Check out the GOLD Version for these additional features:

• Run reports directly from the Admin CP anytime you want
• Post daily report as a "New Post" into an existing thread rather than a "New Thread" each night
• Access to another Gold Mod- Recent Registration Check- will block spammers and scammers trying to register multiple accounts from the same IP address

This mod will run a nightly scan of your "post" and/or "user" table. It will report if it finds any users sharing the same IP address. You choose in the options how many days back you want to look. (Max of 5000 days, but please use more reasonable limits.)

If any "duplicate use" is found the IP addresses, usernames and optionally the posts themselves will be reported.

See a real report: Report Demo at Qapla.com

The report takes the form of a new thread posted to the forum of the Admin's choosing (A private forum for mods or admins is strongly recommended.)

There are options for whitelisting (ignoring) specific IP Addresses and/or userids so if you or your mods post as other users you can prevent that from being reported. If you use the Zoints Anonymous Posting mod you will want to put that userid on the whitelist else the report will out whoever posted "Anonymously."

NOTE: There are PERFECTLY valid reasons 2 or more users may share the same IP address. This report in and of itself is not proof of malicious activity. Users that connect by mobile devices, work in same offices, or go to the same schools for example would likely share the same IP address on some posts. So would too any users connecting from the same home or public Wi-Fi network.

As of version 2.0 there is a report for both the "post" and "user" table. The "user" table will find when 2 or more users register with the same IP address.

Tested and working on VB 3.8.7 and VB 4.1.12/4.2.0 and should work on all 3.7 / 3.8 / 4.x versions.

------------------------------------------------------

Please "Mark as Installed" if you use this.
Donations always appreciated. :up:
Nominate MOTM if you LOVE it!

[TheSupportForum]

@BirdOPrey5

a few questions

1) i set the Reports to be in a private forum, no other usergroups see the forum accept administrators

on activity.php for 4.2.0 PL2 it appears for all users

i was just wondering whether this mod works with the the activity stream as unregistered users can see the post as

Snowderblazer Created a New Thread Duplicate IP Report for 07-10-2012

this is shown to all usergroups including unregistered even though they should not have permission to view it

[Snowhog]

Not so here. If I look at the Activity Stream as a guest (not logged in to the forum), I do not see the generated report, and I have it written to a sub-forum accessible only by the Administrator usergroup.

[TheSupportForum]

Originally Posted by Snowhog

Not so here. If I look at the Activity Stream as a guest (not logged in to the forum), I do not see the generated report, and I have it written to a sub-forum accessible only by the Administrator usergroup.

for soem ready it shows, but found a fix using a plugin, strange but i hope that they implement a feature to not include certain forums

[BirdOPrey5]

Originally Posted by Jennifer2010

I get a database error when trying to run a report.

After clicking Run report, after about 15 seconds:

MySQL Has Gone Away Error probably means the query is overloading your database... How many users and how many posts do you have? You could try lowering the number of days back to look for each report.

Originally Posted by simonhind

@BirdOPrey5

a few questions

1) i set the Reports to be in a private forum, no other usergroups see the forum accept administrators

on activity.php for 4.2.0 PL2 it appears for all users

i was just wondering whether this mod works with the the activity stream as unregistered users can see the post as

Snowderblazer Created a New Thread Duplicate IP Report for 07-10-2012

this is shown to all usergroups including unregistered even though they should not have permission to view it

That would be a problem with the permissions on your forum, not this mod- this mod uses standard code to create a new thread- it is up to the VB 4.2.0 code to decide what goes in the activity stream and what doesn't.

[TheSupportForum]

Originally Posted by BirdOPrey5

MySQL Has Gone Away Error probably means the query is overloading your database... How many users and how many posts do you have? You could try lowering the number of days back to look for each report.




That would be a problem with the permissions on your forum, not this mod- this mod uses standard code to create a new thread- it is up to the VB 4.2.0 code to decide what goes in the activity stream and what doesn't.

Thank you

but i found it rather strange that the forum was visible to me only "set as admin view only" but activity stream showed the threads to all users

i found a solution posted in vbulletin.com

using example in a template hook postdata_presave

if ($this->info['forum']['forumid'] == '2'){
           $this->set_info('skip_activitystream', true);  
     }

[Hostboard]

Fresh install on 4.2.0pl2
Ran the report after configuring it.
Report generated and posted but also got:

Post Check SQL:
 SELECT mmpost.ipaddress, GROUP_CONCAT(DISTINCT mmpost.userid) AS userid, GROUP_CONCAT(DISTINCT mmpost.postid) AS postid, mmuser.usergroupid          FROM mmpost LEFT JOIN mmuser ON mmuser.userid = mmpost.userid          WHERE mmpost.dateline > 1349176946 AND mmpost.userid > 0  AND mmpost.ipaddress != '127.0.0.1'  AND mmpost.ipaddress != ''             GROUP BY mmpost.ipaddress          HAVING COUNT(DISTINCT mmpost.userid) > 1          ORDER BY COUNT(DISTINCT mmpost.userid) DESC          LIMIT 500

User Check SQL:
 SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid          FROM mmuser          WHERE joindate > 1347189746 AND userid > 0  AND ipaddress != '127.0.0.1'  AND ipaddress != ''             GROUP BY ipaddress          HAVING COUNT(DISTINCT userid) > 1          ORDER BY COUNT(DISTINCT userid) DESC          LIMIT 500

[TheSupportForum]

Originally Posted by Hostboard

Fresh install on 4.2.0pl2
Ran the report after configuring it.
Report generated and posted but also got:

Post Check SQL:
 SELECT mmpost.ipaddress, GROUP_CONCAT(DISTINCT mmpost.userid) AS userid, GROUP_CONCAT(DISTINCT mmpost.postid) AS postid, mmuser.usergroupid          FROM mmpost LEFT JOIN mmuser ON mmuser.userid = mmpost.userid          WHERE mmpost.dateline > 1349176946 AND mmpost.userid > 0  AND mmpost.ipaddress != '127.0.0.1'  AND mmpost.ipaddress != ''             GROUP BY mmpost.ipaddress          HAVING COUNT(DISTINCT mmpost.userid) > 1          ORDER BY COUNT(DISTINCT mmpost.userid) DESC          LIMIT 500

User Check SQL:
 SELECT ipaddress, GROUP_CONCAT(DISTINCT userid) AS userid, usergroupid          FROM mmuser          WHERE joindate > 1347189746 AND userid > 0  AND ipaddress != '127.0.0.1'  AND ipaddress != ''             GROUP BY ipaddress          HAVING COUNT(DISTINCT userid) > 1          ORDER BY COUNT(DISTINCT userid) DESC          LIMIT 500

have you se the forums you want the reports sent to

e.g.


also ensure that the userid that reports it has access to that forum

[Hostboard]

As noted, the reported ran and it posted properly.

[TheSupportForum]

Originally Posted by Hostboard

As noted, the reported ran and it posted properly.

Hmm i can only think its how the query is formed for your MYSQL version
seeing that you received the threads in your chosen forum, the script works

[Hostboard]

Originally Posted by simonhind

Hmm i can only think its how the query is formed for your MYSQL version
seeing that you received the threads in your chosen forum, the script works

Running MySQL version:: 5.1.63-0ubuntu0.10.04.1