The Arcive of Official vBulletin Modifications Site.

duplicate ip/password list! · **Released**: 03-17-2002

and here it is, finally.. perhaps one of the sweetest hacks i've ever installed.. unfortunately i didn't write it, but wired from http://www.xirgo.com (an awesome host, btw) did, and he gave me permission to release it on here.

this is the duplicate ip/password list hack. this basically shows all duplicate accounts on your vb forum sorted by their ip and/or password. this easily allows you to detect who's really who on your forum, and delete/ban accounts that you think are duplicates.

basically it works like this. there are two parts to this list, one part sorted by duplicate ip, the other part sorted by duplicate password. you can definitely tell users have multiple accounts on your forum if you see two (or more) users both with duplicate ip's AND passwords. this list also lists their post counts and their last visit date, so, if you want to just delete one of someone's duplicate accounts, you can choose to do so by either their last visit date (delete/ban the account that hasn't been on the forum longer), or by their number of posts (delete/ban the account that has the less posts).

please note that NOT ALL duplicate pw's are duplicate accounts, obviously. any user can happen to have the same pw as someone else. i wouldn't recommend deleting people with JUST duplicate pw's, nor with JUST duplicate ip's, because of shared accounts on the same connection, etc., but they can definitely be fishy.

to install this hack, simply put the dupeip.php file into your /admin directory of your vb forum. then to access it, go to yoursite.com/forum/admin/dupeip.php, of course.. that's it! no templates to install, no files to modify!

NOTE: the passwords on the list are in their VB encrypted form, but to be safe, only show this list to the other admins of your forum, although by putting it in your /admin folder it will ask for an admin login anyway.

Sadie Frost · #22 04-03-2002, 06:08 PM

Great hack!

One question - it seems like it only checks for duplicate IPs that are in the profile (the one you see in the admin cp when you search for a user). It doesn't look through all the IPs (like if you choose view IPs for this user and then find other users for this IP). Is there any way to make it look through every IP for the user?

Thanks!

-=dm=- · #23 04-03-2002, 07:49 PM

Quote:

Originally posted by LaNder
i integrated it in the CP but it still shows the errors:

how can i fix it?

LaNder

Im getting the same error

SaintDog · #24 04-03-2002, 11:11 PM

I don't get any errors, I have clicked, clicked, and clicked again

- yet nothing comes up for me, it works perfectly fine. All I have done is link to it via the admin cp and it works fine.

SaintDog

LaNder · #25 04-05-2002, 03:52 PM

ok i found the problem and made a little change to your code:

your code:

Code:

<html>
<head>
<title></title>
</head>
<style type="text/css">
a:link{ 
	background-color: transparent;
	color: #3F3849;
	text-decoration: none;
	}

a:active{ 
	background-color: transparent;
	color: #3F3849;
	text-decoration: none;
	}

a:visited{
	background-color: transparent;
	color: #3F3849;
	text-decoration: none;
	}

a:hover{
	background-color: transparent;
	color: #3F3849;
	font-weight: normal;
	text-decoration: underline;
	}
</style>

<body bgcolor="#BBBBBB">
<?php
error_reporting(7);

require("./global.php");

echo "<center><font size=\"1\" face=\"verdana\">[<a href='#'>duplicate ip addresses</a>] | [<a href='#pass'>duplicate passwords</a>]</font></center>";

i replaced it with:

Code:

<?php
error_reporting(7);

require("./global.php");

cpheader();

echo "<center><font size=\"1\" face=\"verdana\">[<a href='#'>duplicate ip addresses</a>] | [<a href='#pass'>duplicate passwords</a>]</font></center>";

now it works fine for me

LaNder

mondaynightmike · #26 04-16-2002, 04:37 PM

great just installed this but i get 3 users all having the same password, i know one of them is a totally different person. The other two i had suspected were the same person. My question is out of 103 members what are the chances that 3 memebers all have the same. As it seems pretty strange to me

Jawelin · #27 04-17-2002, 05:28 PM

Great hack and great idea.
I tried to extend it with the same idea, but didn't manage: infact I would search similar usernames and similar emailnames using for instance the SOUNDEX() MySQL function.
But realized I can't group by or order by rows upon string functions fields... only on primitive ones.

Somebody does have any idea ?
Thanks

Mathiau · #28 05-01-2002, 07:34 AM

great hack, am putting it in now, but how exactly do i put a link to it in the Admin CP? anyone, anyone

(could not see how above)

Meirion · #29 05-01-2002, 11:07 AM

[duplicate ip addresses] | [duplicate passwords] | [hide zero posters] | [show zero posters]

This hack is really good! Dead simple, but will be very usefull in my superlsueth opperations in busting the doubles.

I added a little extra feature in this attached version - an option to show or hide accounts that have a zero post count.

Meirion · #30 05-01-2002, 11:09 AM

Aha, I've just noticed a slight bug/feature in my version. You get single rows in the hide zero-posters option! Obviously this isn't that usefull, but I suppose it lets you know that there are other users with a dupe IP/pw for that user, except you've just chosen to hide them.

Meirion · #31 05-01-2002, 11:13 AM

Going back to what someone else mentioned earlier - this only searches through the last recorded IP for each user.

Another really fine way of busting people with many psuodonyms is to check back through their posts and see which IPs were used by different users at the same time, or within 15 mins of each other. I get this with people coming on as themselves, making a few posts then switching to their alter ego and causing some [better wash my mouth][better wash my mouth][better wash my mouth][better wash my mouth].

Who's up for helping writing a bit of SQL to do that!?

X vBulletin 3.8.12 by vBS Debug Information
Page Generation 0.09062 seconds Memory Usage 2,307KB Queries Executed 25 (?)
More Information
Template Usage: (1)SHOWTHREAD (1)ad_footer_end (1)ad_footer_start (1)ad_header_end (1)ad_header_logo (1)ad_navbar_below (1)ad_showthread_beforeqr (2)bbcode_code (1)bbcode_quote (1)footer (1)forumjump (1)forumrules (1)gobutton (1)header (1)headinclude (1)modsystem_post (1)navbar (6)navbar_link (120)option (1)pagenav (1)pagenav_curpage (4)pagenav_pagelink (11)post_thanks_box (11)post_thanks_button (1)post_thanks_javascript (1)post_thanks_navbar_search (11)post_thanks_postbit_info (10)postbit (11)postbit_onlinestatus (11)postbit_wrapper (1)spacer_close (1)spacer_open (1)tagbit_wrapper Phrase Groups Available: global inlinemod postbit posting reputationlevel showthread	Included Files: ./showthread.php ./global.php ./includes/init.php ./includes/class_core.php ./includes/config.php ./includes/functions.php ./includes/class_hook.php ./includes/modsystem_functions.php ./includes/functions_bigthree.php ./includes/class_postbit.php ./includes/class_bbcode.php ./includes/functions_reputation.php ./includes/functions_post_thanks.php Hooks Called: init_startup init_startup_session_setup_start init_startup_session_setup_complete cache_permissions fetch_threadinfo_query fetch_threadinfo fetch_foruminfo style_fetch cache_templates global_start parse_templates global_setup_complete showthread_start showthread_getinfo forumjump showthread_post_start showthread_query_postids showthread_query bbcode_fetch_tags bbcode_create showthread_postbit_create postbit_factory postbit_display_start post_thanks_function_post_thanks_off_start post_thanks_function_post_thanks_off_end post_thanks_function_fetch_thanks_start post_thanks_function_fetch_thanks_end post_thanks_function_thanked_already_start post_thanks_function_thanked_already_end fetch_musername postbit_imicons bbcode_parse_start bbcode_parse_complete_precache bbcode_parse_complete postbit_display_complete post_thanks_function_can_thank_this_post_start pagenav_page pagenav_complete tag_fetchbit_complete forumrules navbits navbits_complete showthread_complete
Messages:

The Arcive of Official vBulletin Modifications Site.

It is not a VB3 engine, just a parsed copy!