There are no differences as this plug-in works with both 3.5 and 3.6 versions of vBulletin.
If you are like me and migrated from .threads, a common modification was an "AE detector", a simple mod that saved a cookie of a history of ids logged into on your site. If someone logged into more than one account, you got a PM letting you know that your site was being accessed from multiple accounts.
Over the years this was very helpful in identifying users who were posting under multiple accounts (alter-egos!) and users who would return after being banned.
You might be wondering why I don't use the vbcookie call - well, thats because on logout all vB cookies are cleared, so we need to store a cookie that is not effected by the login/logout process.
New Installation
1. Add New Product with attached XML
2. Go to vBulletin Options -> AE Multiple Login Detection Settings and set your specific settings.
Time to install: Easy - 2 minutes.
Upgrade
If you installed this as a Plug-in manually, you can delete that plugin and install this Product, just make sure to go into the Options and set them accordingly.
I hope you find this useful and will click INSTALL if you use it; should it prove useful to enough people I can look at making this installation more automated without the need for edits and an Admin Options page.
To upgrade you will want to reimport this XML file and edit your options accordingly.
1.0.3
-----
. Added a check to ensure that users weren't deleted when reporting violations
. added htmlspecialchars_uni call to username
Note: I am unable to get the call to construct_phrase with $vbphrase['multiplelogin_alert'] to work reliably, as such the $message variable is still set manually inside the plug-in and not via the phrase. If anyone has an idea of why this might not always work, I'm all ears.
1.0.2
-----
. Updated to include exclusion groups, users
. Changed so PM is sent by ae sender id
1.0.1
-----
. Released as a Product (thank you PHPGeek2k3 for your help)
. Added option to post to a forum versus send a PM (or both)
. All settings moved into Admin Option
1.0.0
-----
Initial release.
Show Your Support
This modification may not be copied, reproduced or published elsewhere without author's permission.
First, my apologies if this question is already answered in this thread.
Can this mod be used to report ONLY failed logins?
I want to get a notification when a person or robot tries to login to another person's account and is guessing passwords.
Spammers are now using this method to get access to a registered account so they can post without the new user moderation I'm using on my forum.
These spammers will try one account then move on to another, trying to brute-force guess or crack the passwords for registered users, so their IP will stay the same while they make many attempts.
If this mod does not log failed attempts, then does anyone know of a mod that does?
No, that's not what this mod is for. The closest I can think of would be Mail Admin When fail to login to admincp V2. It will trigger when they reach an admin account anyway. Maybe.
I can't imagine a spammer taking the time to do this. I mean, we're not talking breaking a single account by brute force with unlimited password guesses. Rather, they would have to move from account to account before starting over with the first one with their next guess. And if they got back to the first account too soon, they would get locked out.
No, that's not what this mod is for. The closest I can think of would be Mail Admin When fail to login to admincp V2. It will trigger when they reach an admin account anyway. Maybe.
Yeah, looking for something notifies on any failed logins. Would probably be really simple, just has to look at the strikes table and notify whenever something new comes up there. I'm just not enough of a programmer to write it.
Quote:
I can't imagine a spammer taking the time to do this. I mean, we're not talking breaking a single account by brute force with unlimited password guesses. Rather, they would have to move from account to account before starting over with the first one with their next guess. And if they got back to the first account too soon, they would get locked out.
Never underestimate the determination of spammers!
It's probably an automated thing anyway. Tries a username with 5 different passwords, then moves to the next username.
Multiple account login detector (AE Detector) Details »»
About Developer
Visit Web Site
No support by the author.
12-20-2010, 06:46 PM
