Administrative and Maintenance Tools - vB3.5 Email notification if someone attempts to access your Admin or Mod CP

vB3.5 Email notification if someone attempts to access your Admin or Mod CP
Version 1.0.1
(By Boofo)

What does this modification do?
When someone tries to login to your Admin CP or Mod CP, you will get an email that contains the username they tried, the password they tried, their IP address, hostname, number of strikes, referrer, script, and the date & time of the attempt. It also will now distinguish itself in the message subject between a failed Admin CP attempt and a failed Mode CP attempt, so you will know right off which CP they tried to login to.

NOTE: To alleviate anyone getting upset about plain text passwords being transmitted from the server, the ONLY time a plain text password is sent, is when it is a failed login attempt. It is not stored on the server anywhere and no hashed passwords are ever revealed to anyone. I think it's good to know if anyone is getting close to what my CP password is so I can change it if necessary.

Credits:
Thanks to EvilLS1 for making the vB 3.0 version of this modification on which this update is based and released with permission.

Version Information:
Version 1.0.0 --Initial release
Version 1.0.1 --Fixed user name being wrong on a user attempt.


Installation overview:
--------------------------------------
Files to edit: (2)
--incudes/adminfunctions.php
--login.php


What it looks like in the Mod CP when an anonymous users tries to login:

-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Ned
Password tried: does this work?
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Monday, September 26th, 2005 at 8:22:29 am
-----------------------------------------------------

What it looks like in the Mod CP when a user from your site tries to login:

-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Boofo
Password tried: does this work?
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Monday, September 26th, 2005 at 8:22:29 am
-----------------------------------------------------
USER ATTEMPT: Your Forums has identified this registered user as: Boofo

[Boofo]

Since I am still running 3.5.4, I'm not sure what has changed in 3.6. If someone could let me know what instructions I need to upgrade, I will add the 3.6 version to this post, too.

[Nathan2006]

Originally Posted by Boofo

Since I am still running 3.5.4, I'm not sure what has changed in 3.6. If someone could let me know what instructions I need to upgrade, I will add the 3.6 version to this post, too.

This is still working great for 3.68

I totally forgot about this

Email is still sending too.

[PoetJA-1975]

Yeppers - still works for 3.6.8 brilliantly!
Thanx again for sharing - should be a default feature!

Jacquii.

[MB-Soft]

Works great in vB 3.6.8

Thanks!

[brvheart]

not working on 3.6.8 , MB what edits did you use?

[Vman]

DITTO!!! I just installed it in 3.6.8 and its not working, there are no error messages, but when attempted to make false login attempts, there were not email notifications sent!!!!!

Can someone PLEASE fix this minor issue since this a good hack/plug to have!!!!

Thanks

[Boofo]

This is working on 3.7.0 beta 4. I have posted the vb 3.7.0 beta 4 version in the 3.7 modifications area.

[segwayon]

One difference I noticed when installing in 3.6.8 was one of the lines I was supposed to find:

<form action="../login.php" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">

And this was what I found in 3.6.8:

<form action="../login.php?do=login" method="post" name="loginform" onsubmit="md5hash(vb_login_password, vb_login_md5password, vb_login_md5password_utf); js_do_options(this)">

I didn't alter any of the replacement code:

... etc ... <form action="../login.php" method="post" ... etc ...

Should I have kept the same pattern in the form tag?

[Boofo]

Maybe you ought to go all out and install the 3.7 version of this hack which has the line you are looking for.