Version: 1.0.2, by Boofo
Developer Last Online: Jun 2012
Category: Administrative and Maintenance Tools -
Version: 3.7.x
Rating:
Released: 01-31-2008
Last Update: 02-02-2008
Installs: 172
Code Changes
No support by the author.
Email notification if someone attempts to access your Admin or Mod CP for vBulletin vB3.7.0 beta 4
Version 1.0.2
(By Boofo)
What does this modification do?
When someone tries to login to your Admin CP or Mod CP, you will get an email that contains the username they tried, their IP address, hostname, number of strikes, referrer, script, and the date & time of the attempt. It also will now distinguish itself in the message subject between a failed Admin CP attempt and a failed Mode CP attempt, so you will know right off which CP they tried to login to.
NOTE: Those who respectfully donate will be have access to the password version of this hack by sending me a PM after donation.
Credits:
Thanks to EvilLS1 for making the vB 3.0 version of this modification on which this update is based and released with permission.
Version Information:
Version 1.0.1 --Initial release
Version 1.0.2 --Removed password code for security reasons.
Installation overview:
--------------------------------------
Files to edit: (1)
--login.php
What it looks like in the Mod CP when an anonymous user tries to login:
-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Ned
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Thursday, January 31st, 2008 at 8:22:29 am
-----------------------------------------------------
What it looks like in the Mod CP when a user from your site tries to login:
-----------------------------------------------------
Someone is trying to login to your Your Forums Mod CP!
-----------------------------------------------------
Username tried: Boofo
IP Address: 1.123.23.4
Host: 1-123-23-4.some.name.com
Strikes: 4 out of 5
Referer: http://www.yoursite.com/forums/modcp/
Script: http://www.yoursite.com/forums/login.php
Date & Time: Thursday, January 31st, 2008 at 8:22:29 am
USER ATTEMPT: Your Forums has identified this registered user as: Boofo
NOTE: If you do not click install, you do not need support.
Show Your Support
This modification may not be copied, reproduced or published elsewhere without author's permission.
The password code in this hack has been removed due to security concerns by the staff of vbulletin.org.
The concerns we had was more about the wording of your original thread, stating that no plaintext password would be sent from the server. Although this was technically correct, it did sent the plaintext passwords (over the internet) to the server upon any CP-login. As sending plaintext passwords over the internet is considered reducing the standard security, we requested that text to be changed to reflect the fact that the modification did sent plaintext passwords.
Instead the author choose to remove the password from the modification, thus circumventing any possible security degradation.