Get an e-mail if someone is trying to access your Admin CP (With IP address)

Here's my version:

In sessions.php find this code:

    if (md5($loginpassword)!=$bbuserinfo[password]) {

right below it, add this code:

			$ipaddress=iif(getenv("REMOTE_ADDR")!="",getenv("REMOTE_ADDR"),$HTTP_HOST);
			$iphostname = @gethostbyaddr($ipaddress);
			$message="Someone is trying to login using your admin account!\n\nUsername he tried to use: $loginusername\nPassword he tried to use: $loginpassword (".md5($loginpassword)." in encryption)\n\nThe IP address is: $ipaddress\nThe host is: $iphostname";
			mail($webmasteremail,"Warning: vBulletin Admin Login Tried",$message,"From: \"$bbtitle Admin CP\" <$webmasteremail>");

You will get a message:

Someone is trying to login using your admin account!

Username he tried to use: xxx
Password he tried to use: xxx (xxxxxxxxxxxxxxxxxxxx in encryption)

The IP address is: xx.xx.xx.xx

every time someone is trying to login to the admin cp with no success.

Have fun.

[digitalJE5U5]

Ive tried this "simple" hack 25 times. All from fresh copies of sessions.php. I've tried to log into admin CP using real names/wrong pass and using wrong names/passes. I've never got a single email.

Whats up?

Runnin version 2.2.7

/DJ

Works great. 2.2.7

digitalJE5U5....are you sure your webmaster email address is correct in your admin cp?

[digitalJE5U5]

Im positive. Using this on 2.2.7. But, I've read it works on that too.

:cry:

/DJ

[Talisman]

Love the hack. Just caught myself trying to sneak into my Admin CP.... whew!

And when I checked who was up to no good ...... sure enough, it was me!!

(BTW, I'm getting two copies of the email notice, but that's not a problem.)

Thanks for all the great hacks, everyone. :banana:

[ravenshadow]

Works great.. 2.2.8

Thank you

[Littlebit]

Working great with 2.2.8 for me too. Thanks Firefly :bunny:

[sklwer]

I tried to use Matts ( post 107 ) but I am having dificculy understanding.. The first Hack is easy to understand but the second Hack says "then second additon is in adim/global.php

and it goes right after

PHP:

$getperms=$DB_site->query_first("SELECT cancontrolpanel FROM user,usergroup WHERE user.usergroupid=usergroup.usergroupid AND user.userid='$bbuserinfo[userid]'");
if ($getperms[cancontrolpanel]!=1) {

So the second hack go right after what??? what am i missing?

[Erwin]

It's Mutt, not Matt.

https://vborg.vbsupport.ru/showthrea...079#post232079

In the second part, he is saying to open admin/global.php and FIND:

PHP Code:

$getperms=$DB_site->query_first("SELECT cancontrolpanel FROM user,usergroup WHERE user.usergroupid=usergroup.usergroupid AND user.userid='$bbuserinfo[userid]'"); 


Then after that, PASTE THE SAME CODE you used in the first part.

Hope that clears it up a bit.
if ($getperms[cancontrolpanel]!=1) {

[sklwer]

There is no " $getperms=$DB_site->query_first("SELECT cancontrolpanel FROM user,usergroup WHERE user.usergroupid=usergroup.usergroupid AND user.userid='$bbuserinfo[userid]'"); on Version 2.28 Global.php

[sklwer]

Soory I was looking at /Global NOT admin/global sorry