Proxy Hack v1.0

Ooook,

Well, this hack is a little thing to give you vB admins and moderators some more information about the users using proxys on your board (mainly, thier IP address).

The following version is upto date and works with vb 2.2.8 and whatever else. This version was updated by Stadler to work with 2.2.8. I cannot provide support personally for ANY versions here. And I do not know what support Stadler can give you.

So, download the 2.2.8 update here

----------------

Everything below has to do with super old versions that don't matter.. because they are super old! You don't want them, so don't even read it!


STOP READING! hehe, anyway. I repeat:

VERSION 2.2.8 ABOVE ^
VERSION 2.2.5 BELOW

enjoy

--------------

Screenshots are in the posts to follow.

Let me know how you like it, or ways I could improve it. ^_^ :bunny:

Edit: Non intrusive version
This little edit simply adds the proxy info to the getip template. So when mods/admins click the "IP Logged" button/graphic if there is any proxy info, it will tell them instead of in postbit.

Get it here

Attachment: Non Intrusive Version Screenshot

Normal, version:

[Stadler]

Well, you need to run this query in order to add this field to your 'post'-Table.

If you're not able to add this field through the query I can't help you, sorry.

[Asendin]

can the query be done threw ssh?

maybe there is a bug in my Cpanel version i have never had a problem with running a query before.

[Stadler]

I don't know. I'm doing all Database Maintenance and all querys through phpMyAdmin, but I think you should be able to execute the query, if you're logged in into your forums database. Well ... I prefer phpMyAdmin for this.

Just an idea, but maybe you should upgrade to phpMyAdmin 2.3.2 and then retry to apply the query again through phpMyAdmin?

[Asendin]

it is version 2.3.2

MySQL 3.23.53

thanks

[350Chevy]

I installed this hack but it barely works..

To test it I used 5 well known proxy web based cgi engines and it only detected one. On top of that, the one that it DID detect said my IP was someone WAY off from what it really is.

Great idea, great concept and it does sort of work but I'm just letting you know this needs much more work and should probably still be in the BETA forum.

[Takara]

Its dependant on the proxy and such. Normal ISP proxys and non anon proxys give your IP, but not all. So the code is not beta.

[Paul]

A Bugtraq subscriber released a XSS vulnerability today involving Ikonboard and a similar feature to this hack in that forum. Preventative measures should probably be taken with this hack:

2. Via X-Forwarded-For: header.

User's IPs are available for admin. If user accesses Ikonboard via
Proxy, X-Forwarded-For: header is shown instead of proxy IP without
filtering. Length is limited to 16 characters, but it's still possible
do something interesting with 2 requests <script>/* and */<script>.

Best wishes,
Paul

[Stadler]

Well ... why reinvent the wheel? Just use the XSS-Fix from vB2.2.9:

IN newthread.php AND newreply.php FIND

    } else {
      $proxyip="";
    }

ADD AFTER THAT

    $proxyip=xss_clean($proxyip);

Be aware, that this fix needs vB2.2.9 and above.

Stadler

[Bison]

Are there any more methods to checking proxies than this:

        
if ($HTTP_SERVER_VARS['HTTP_FORWARDED']!="") {
      $proxyip=$HTTP_SERVER_VARS['HTTP_FORWARDED'];
    } elseif ($HTTP_SERVER_VARS['HTTP_X_FORWARDED_FOR']!="") {
      $proxyip=$HTTP_SERVER_VARS['HTTP_X_FORWARDED_FOR'];
    } elseif ($HTTP_SERVER_VARS['HTTP_CLIENT_IP']!="") {
      $proxyip=$HTTP_SERVER_VARS['HTTP_CLIENT_IP'];
    } else {
      $proxyip="";
    }
    $proxyip=xss_clean($proxyip);

All this seems to do is match similarities in the actual IP address ... doesn't do a good job at detecting proxies. I have tested this code with all types of proxies and I aint getting nothing!

[Talisman]

We're getting odd results, too. It's noting people with proxies who don't use them. Not quite sure what to think now.

[BlackDeath]

i'm trying to install this hack but i do not have a functions.php????? LOL, did someone eat it?

[BlackDeath]

Originally posted by BlackDeath
i'm trying to install this hack but i do not have a functions.php????? LOL, did someone eat it?

nm, i found it.

[BlackDeath]

not to be a smartass but why can't someone just make this hack or any hack an easy install. you click set up and it does it itself. what's up w/ all the copy and pasting and running sql queries. this needs to be made easier to use. just my opinion, i could be wrong.

[BlackDeath]

i got this thing installed and it appears to work fine, however has anyone noticed that if you have the board turned off and you try and post, you get a sql error?

[350Chevy]

nope.. no SQL errors here when the board is off...