The Arcive of Official vBulletin Modifications Site.

vB Dummy ACP 1.0.0 · **Released**: 12-23-2008

vB Dummy ACP

This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.

Features

Acts just like real admincp login
Can automatically defend against detection (explained below)
Won't even allow real admin logins
Easily create as many dummy acps as you like
Will work without plugins enabled (partially)

Defense Against Detection

In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:

1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.

2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:

1. The login provided is actually wrong
2. The login provided is real, but an administration login

Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.

ForumsMods · #22 12-26-2008, 05:31 PM

Oh, thanks.

glorify · #23 12-26-2008, 09:07 PM

Quote:

Originally Posted by dtv100

thanks you becoming one of my favorite coder.
gone try it with 3.7.4 and report later

all that secure a website is love by me.

Agreed. Man, Deceptor you are banging them out and have done some fresh new ideas. Kudos bro.

ShadMan · #24 01-03-2009, 11:39 PM

Cool idea..installed. Thanks!

ade5675 · #25 01-08-2009, 12:48 AM

Great mod .... :up:

I sent you a PM about a little security 'concern' (I don't wanna make it public for now) ...... Look into it and let me know via PM.

I'll edit the post once verified.

imported_stefan · #26 01-10-2009, 09:02 PM

Sorry, but how is the system detecting that you are allowed to log in to the acp, because yo write even admin with right username and pw can't log in?

RHWiRED · #27 01-12-2009, 06:37 AM

You're meant to rename the real admin directory, and upload this "admincp" folder to your website, so people can't tell it's a fake one.

Thanks

RvG2 · #28 07-18-2009, 05:53 AM

Quote:

Originally Posted by Deceptor

ModCP and logs coming in next version

hi dear... would like to bump this

|Jordan| · #29 09-10-2010, 12:34 AM

This is a great system. I tried setting up something like this but failed.

It would be great if it could log IP's that try logging in and then add those IP's to the forum's ban list.

fxwoody · #30 09-11-2010, 10:25 AM

Really neat trick shot deceptor! I like it!

Installed and can't wait for the IP tracer

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.05089 seconds Memory Usage 2,312KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (2)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (4)navbar_link (120)option (1)pagenav (1)pagenav_curpage (2)pagenav_pagelink (10)post_thanks_box (10)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (10)post_thanks_postbit_info (9)postbit (1)postbit_attachment (10)postbit_onlinestatus (10)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_attachment postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!