Email notification if someone attempts to access your Admin CP

This is my version of the hack that Firefly released for VB2.

VB3's standard log of failed admincp login attempts is a nice feature.. but since you get no instant notification, by the time you check the log it could be too late. Also, the log doesn't show which passwords the potential intruder is trying... If someone is close to guessing my password I wanna know about it!

What does it do? With this hack, when someone tries to login to your admincp or modcp you'll get an email that contains the username they tried, the password they tried, their ip address, hostname, # of strikes, referer, script, and the date & time of the attempt.

It will look something like this:

--------------------------------------------------
WARNING: Failed admin logon in vBulletin 3.0.1
--------------------------------------------------
Someone is trying to login to your Admin CP!

Username tried: JimbobJoe
Password tried: aCcEsS
IP Address: 67.13.27.156
Host: asd691917124.whatever.com
Strikes: 1/5
Referer: http://www.yoursite.com/forums/admincp/
Script: http://www.yoursite.com/forums/login.php
Date: Wednesday 28th of April 2004 07:50:02 AM
--------------------------------------------------

If the person who is attempting to access your CP happens to be registered & logged in, this line will also be included in the email:

vBulletin has identified this user as: (intruder's real username here)

(Thanks to AlexanderT for the idea for this addon.)


Update (1-4-05): A couple of users have expressed concern about this mod sending a plaintext password over http for all logins. This update (v1.1) addresses that concern by only sending the password for cplogins. To update just re-do the first step in the instructions for your vbulletin version (the first edit to adminfunctions.php). Or if you'd prefer that the attempted password not be sent at all simply skip the edits to adminfunctions.php.

If you don't recieve an email when testing, make sure you have the webmaster email set in the admincp (vBulletin Options + Site Name / URL / Contact Details). Also, sometimes it takes a while for the email to arrive. So give it plenty of time before screaming "it doesn't work"..

Still not working? Read this!

Credits: Thanks to the original creator of this hack (Chen) for the idea, and thanks to Boofo for helping me test it.

[dookie]

Works

[knightdreams]

Very nice...when testing I got locked out of my own forum....works great

[Eagle Creek]

Originally Posted by knightdreams

Very nice...when testing I got locked out of my own forum....works great

I've had the same error. I just did something wron when I installed it..

[knightdreams]

Was not an error, vb just locked out our IP address when we tried loging in wrong on purpose while testing it.

[Megareus Rex]

Ok, everything went well, but there's one problem:

The Password: field in the emails is left blank, so I can't tell what password was used. Any ideas?

[Eagle Creek]

Originally Posted by knightdreams

Was not an error, vb just locked out our IP address when we tried loging in wrong on purpose while testing it.

always first turn of the strike system if you gonna test "passwordthings"

[Gnappy]

Originally Posted by Gnappy

first of all: thx for reply

my webmaster mail is correctly setted up, i made all the points in your "check list" and it seems all ok...

im sure i uploaded the correct edited files(lol), if u want(thx in advance) i can send my 2 files on your email so u can check if i hacked correctly(i verified by myself twice)...

thanks a lot for your time

sorry man, i made a stupid mystake... bug with another hack, not the hack works nicely


thx EvilLS1 :banana:

[EvilLS1]

Originally Posted by Megareus Rex

Ok, everything went well, but there's one problem:

The Password: field in the emails is left blank, so I can't tell what password was used. Any ideas?

The only thing I can suggest is re-checking the file edits to make sure nothing was missed. Sorry I can't be more helpful but I can't think of anything else that would cause it unless its conflicting with another hack.

[Megareus Rex]

Nope, it still doesn't give the password, and everything was installed flawlessly. The password used is the ONLY thing about this hack that doesn't work.

[Pamela]

Super easy to install and works great. Thank you!

*clicks installed*