Email notification if someone attempts to access your Admin CP

This is my version of the hack that Firefly released for VB2.

VB3's standard log of failed admincp login attempts is a nice feature.. but since you get no instant notification, by the time you check the log it could be too late. Also, the log doesn't show which passwords the potential intruder is trying... If someone is close to guessing my password I wanna know about it!

What does it do? With this hack, when someone tries to login to your admincp or modcp you'll get an email that contains the username they tried, the password they tried, their ip address, hostname, # of strikes, referer, script, and the date & time of the attempt.

It will look something like this:

--------------------------------------------------
WARNING: Failed admin logon in vBulletin 3.0.1
--------------------------------------------------
Someone is trying to login to your Admin CP!

Username tried: JimbobJoe
Password tried: aCcEsS
IP Address: 67.13.27.156
Host: asd691917124.whatever.com
Strikes: 1/5
Referer: http://www.yoursite.com/forums/admincp/
Script: http://www.yoursite.com/forums/login.php
Date: Wednesday 28th of April 2004 07:50:02 AM
--------------------------------------------------

If the person who is attempting to access your CP happens to be registered & logged in, this line will also be included in the email:

vBulletin has identified this user as: (intruder's real username here)

(Thanks to AlexanderT for the idea for this addon.)


Update (1-4-05): A couple of users have expressed concern about this mod sending a plaintext password over http for all logins. This update (v1.1) addresses that concern by only sending the password for cplogins. To update just re-do the first step in the instructions for your vbulletin version (the first edit to adminfunctions.php). Or if you'd prefer that the attempted password not be sent at all simply skip the edits to adminfunctions.php.

If you don't recieve an email when testing, make sure you have the webmaster email set in the admincp (vBulletin Options + Site Name / URL / Contact Details). Also, sometimes it takes a while for the email to arrive. So give it plenty of time before screaming "it doesn't work"..

Still not working? Read this!

Credits: Thanks to the original creator of this hack (Chen) for the idea, and thanks to Boofo for helping me test it.

[Mechanical Mind]

Originally Posted by EvilLS1

Mechanical Mind,
I don't think the name of the folder would have any effect on it but I could be wrong.

The only other thing I can think of is maybe one of the other hacks changes something which effects this hack. Since I don't use any of those myself I can't say for sure. You could try applying this hack to fresh un-modified files and see what happens.

I'll make you a deal. If you would like access to my server and admin to check my modifications to the files, just pm me and let me know.

(Chances are that I have made a mistake in modifying the files. I don't think I have successfully installed a hack yet, without needing help...)

We would both benefit if you can get it working.

1. You can confirm that your hack works in a forum running the hacks that mine does.
2. And I could get it working.

Sounds like a good deal, eh? :nervous:

[EvilLS1]

Originally Posted by Mechanical Mind

I'll make you a deal. If you would like access to my server and admin to check my modifications to the files, just pm me and let me know.

(Chances are that I have made a mistake in modifying the files. I don't think I have successfully installed a hack yet, without needing help...)

We would both benefit if you can get it working.

1. You can confirm that your hack works in a forum running the hacks that mine does.
2. And I could get it working.

Sounds like a good deal, eh? :nervous:

I can check your file edits if you want.

[Mechanical Mind]

Originally Posted by EvilLS1

I can check your file edits if you want.

Sure. Check your mailbox. :classic:

[Mechanical Mind]

Update.

This hack is awesome and works perfect, even with my forum which is heavily modded and has several hacks listed above.

Thanks to EviLS1 for taking the time to check my files. I made an error in uploading the modified files. Other than that, this hack works great.

Definitely an added sense of security!!!

PS - If you have renamed your admincp folder - this hack still works!!!

mm

[SamirDarji]

Originally Posted by Mechanical Mind

Update.

This hack is awesome and works perfect, even with my forum which is heavily modded and has several hacks listed above.

Thanks to EviLS1 for taking the time to check my files. I made an error in uploading the modified files. Other than that, this hack works great.

Definitely an added sense of security!!!

PS - If you have renamed your admincp folder - this hack still works!!!

mm

Good info! Thank you for the update.

[Gnappy]

[high]* Gnappy installed
[/high]

but i have the same problem of Mechanical Mind: im running 3.0.3(with init.php patch) with many hacks installed...

i checked my work twice and i readed and tryied the "check list"... still not works..

maybe my problem is the same of Mechanical Mind:

I made an error in uploading the modified files. Other than that, this hack works great

what kind of problem u can discover uploading 2 files?


thanks for assistance

[EvilLS1]

Originally Posted by Gnappy

[high]* Gnappy installed
[/high]
what kind of problem u can discover uploading 2 files?


thanks for assistance

He didn't upload the edited files. I can double check your file edits if you want but other than the things on the check list I can't think of anything that would stop it from working. The most common problem that people seem to have is not having the webmaster email set correctly in the admincp.

[Gnappy]

first of all: thx for reply

my webmaster mail is correctly setted up, i made all the points in your "check list" and it seems all ok...

im sure i uploaded the correct edited files(lol), if u want(thx in advance) i can send my 2 files on your email so u can check if i hacked correctly(i verified by myself twice)...

thanks a lot for your time

[EvilLS1]

check your PMs..

[Bluetiereign]

Awesome hack duder.. thanks.. Worked like a charm on the very first try.

whoops..forgot to click - <install>. done..