Administrative and Maintenance Tools - Log Logins Hack

Log Logins Hack 2.0

Click here to Nominate this Mod for Mod the Month

About this hack:
This hack will log the userid, username, ipaddress, where the login is, and time all your users log onto your forum.

Installation information on hack:

• Files edited: 0
• Templates edited: 0
• Files to upload via FTP: 2
• Time to install: 1 minute max

Updates:

Version 2.0 (08/25/06):

• First release of this hack for vb3.6.

Please post your comments or suggestions for this hack. I read ALL posts.

MAKE SURE YOU CLICK INSTALL!
You will get an email when a new version is released.

This hack is created for your use free of charge. No payment is requested. However, if you would like to donate money for the work I put in to this hack, a donation would show your appreciation.

[GiaNNi]

There are some users, which are not used to write, only moderate; and this users are shared by some people. And some months ago someone changed a password, and i couldnt know who.
When logging passwords, if this occures again, i can see which IP loged first with a changed (new) pass.

Sorry for my bad enlgish.

[Abe1]

Originally Posted by GiaNNi

I want to know if any of my moderators change his password, because they cant do it, (internal forum team rules).

There is a usergroup option to log old passwords in vb. Maybe this can help you. It logs it encrypted but maybe keeps a date.

[Lovinmysailor]

When I click on the Log Manager it tells me "No log file defined in vBulletin Options" What do I do? TIA

[Abe1]

Originally Posted by Lovinmysailor

When I click on the Log Manager it tells me "No log file defined in vBulletin Options" What do I do? TIA

Not sure what you mean.

[PinkDaisy]

Installed... we will see how it goes. So far I've tried to look into 2 accounts that I know have shared at least 1 from before, but it doesn't show anything ??

[GeekDrew]

Originally Posted by PinkDaisy

Installed... we will see how it goes. So far I've tried to look into 2 accounts that I know have shared at least 1 from before, but it doesn't show anything ??

... what? All this modification does is write a log entry when someone logs in.

[PinkDaisy]

Oh. I thought i would show when they log into each others accounts..lol. Sory!!

[GeekDrew]

Originally Posted by PinkDaisy

Oh. I thought i would show when they log into each others accounts..lol. Sory!!

For that, check here.

[PinkDaisy]

Originally Posted by GeekDrew

For that, check here.

Yeah I have that... lol I dunno what I was thinking!! Thanks..

[lazytown]

Has anyone else tried this edit below to the mod with 3.6.4? Does it work well?

-vissa

Originally Posted by serg472

Quick solution for those who want this mod to log cookie logins as well (UNOFFICIAL, UNSUPPORTED, USE AT YOUR OWN RISK etc.).

The only minor issue after the following modification is that when user logs in using a standart login form it will log this twice - as a standart login and a cookie login. I don't want to modify this hack too much, so I left it as it is.

1. Open product-log_logins.xml and find:

PHP Code:

<phrase name="reg_login" date="0" username="" version=""><![CDATA[Standard]]></phrase> 


add below:

PHP Code:

<phrase name="cookie_login" date="0" username="" version=""><![CDATA[Cookie]]></phrase> 


2. Open loginlog.php and find:

PHP Code:

else if ($log['logintype'] == 'modcplogin')
{
    $log['logintype'] = $vbphrase['mod_login'];
} 


add below:

PHP Code:

else if ($log['logintype'] == 'cookie')
{
    $log['logintype'] = $vbphrase['cookie_login'];
} 


3. Open includes/class_core.php and find:

PHP Code:

// or maybe we can use a cookie..
if (($gotsession == false OR empty($session['userid'])) AND $userid AND $password AND !defined('SKIP_SESSIONCREATE'))
{
 
    $useroptions = (defined('IN_CONTROL_PANEL') ? 16 : 0) + (defined('AVATAR_ON_NAVBAR') ? 2 : 0);
    $userinfo = fetch_userinfo($userid, $useroptions, $languageid);
 
    if (md5($userinfo['password'] . COOKIE_SALT) == $password)
    {
        $gotsession = true;
 
 
 
        // combination is valid
        if (!empty($session['sessionhash']))
        {
            // old session still exists; kill it
            $db->shutdown_query("
                DELETE FROM " . TABLE_PREFIX . "session
                WHERE sessionhash = '" . $this->registry->db->escape_string($session['sessionhash']). "'
            ");
        }
 
        $this->vars = $this->fetch_session($userinfo['userid']);
        $this->created = true;
 
        $this->userinfo =& $userinfo; 


add below:

PHP Code:

//LOGINS HACK - START
$db->query_write("INSERT INTO " . TABLE_PREFIX . "logins (userid, username, ipaddress, phpdate, logintype) VALUES (" . $this->userinfo['userid'] . ", '" . $db->escape_string($this->userinfo['username']) . "', '" . $db->escape_string(IPADDRESS) . "', " . TIMENOW . ", 'cookie')");
//LOGINS HACK - END 


4. Reinstall product.