Administrative and Maintenance Tools - Multiple account login detector (AE Detector)

Mod of the Month winner!
Top 10 most installed mods for vB3.6!

Same plug-in found here:

https://vborg.vbsupport.ru/showthread.php?t=107566

There are no differences as this plug-in works with both 3.5 and 3.6 versions of vBulletin.

If you are like me and migrated from .threads, a common modification was an "AE detector", a simple mod that saved a cookie of a history of ids logged into on your site. If someone logged into more than one account, you got a PM letting you know that your site was being accessed from multiple accounts.

Over the years this was very helpful in identifying users who were posting under multiple accounts (alter-egos!) and users who would return after being banned.

You might be wondering why I don't use the vbcookie call - well, thats because on logout all vB cookies are cleared, so we need to store a cookie that is not effected by the login/logout process.

New Installation
1. Add New Product with attached XML
2. Go to vBulletin Options -> AE Multiple Login Detection Settings and set your specific settings.

Time to install: Easy - 2 minutes.

Upgrade
If you installed this as a Plug-in manually, you can delete that plugin and install this Product, just make sure to go into the Options and set them accordingly.

I hope you find this useful and will click INSTALL if you use it; should it prove useful to enough people I can look at making this installation more automated without the need for edits and an Admin Options page.

To upgrade you will want to reimport this XML file and edit your options accordingly.

1.0.3
-----
. Added a check to ensure that users weren't deleted when reporting violations
. added htmlspecialchars_uni call to username

Note: I am unable to get the call to construct_phrase with $vbphrase['multiplelogin_alert'] to work reliably, as such the $message variable is still set manually inside the plug-in and not via the phrase. If anyone has an idea of why this might not always work, I'm all ears.

1.0.2
-----
. Updated to include exclusion groups, users
. Changed so PM is sent by ae sender id

1.0.1
-----
. Released as a Product (thank you PHPGeek2k3 for your help)
. Added option to post to a forum versus send a PM (or both)
. All settings moved into Admin Option

1.0.0
-----
Initial release.

[MPDev]

There is no such thing as a "false alarm" (unless you've screwed up your system and everyone's userids have changed); it uses cookies which are only present on those computers.

[EdQ]

Well then I don't understand. I know this person isn't logging into the other members PC.

And my VB is working fine.

What is weird is both members were detected for the same user.

[TaBaTaN]

Installed!!
Thank you

[Luigi^]

Originally Posted by Luigi^

Hi,
I am trying translate the rows in Italian but when but the translation it stops to work, like never?

I replace:
$message = htmlspecialchars_uni($vbulletin->userinfo['username']) . " seems to have multiple personalities using $andids sharing the same computer. No soup for you! and you! and you!";
with
$message = "$andids utilizzano lo stesso computer";

and

$subject = $vbulletin->userinfo['username'] . " tripped AE detector";
with
$subject = $vbulletin->userinfo['username'] . " multiaccount";

it don't work, why?
thanks and sorry forum my english

please help me :surprised:

[coffee]

Originally Posted by Luigi^

please help me :surprised:

Edit the product-ae_detection.xml file by translating English to your language (I used translate.google.com because I don't speak Italian):

Line #53:

PHP Code:

if ( !empty($andids) ) $andids .= "e"; 


Line #68:

PHP Code:

$message = htmlspecialchars_uni($vbulletin->userinfo['username']) . " sembra avere personalit? multiple usando $andids ripartire lo stesso calcolatore. Nessuna minestra per voi! e voi! e voi!"; 


Line #71

PHP Code:

$subject = $vbulletin->userinfo['username'] . " rivelatore scattato di AE"; 


For the remaining phrases; use your Admin CP to search for this word in the titles: "multiplelogin" and then type the translation you want.

[nocte]

I's suggest to include the Mulitaccount Warning Threads in the search-index. Sometimes it might be useful to search through them.

.. espescially when you have up to 20 Warnings a day, like we have.

[Devil Woman]

Hi there, I have just come onto my computer to find a pan full on PM's on my forum as what they thought was a member had posted in a hidden forum just for staff.

turns out it wa sthe AE detector had picked up someone using multiple accounts and it had been posted in that forum only for some unknown reason it was autmatically posted using a members account and not the account I set in the AE Detector settings.

Can anyone help?

Thanks

[voclain]

I've installed this...but now I'm UNINSTALLED IT....what I was thinking it did was let me know when a USER was "SHARING" a username and password.

My site is a pay site....the only way you can get in is to pay. So...I'm pretty sure I have several users who have given there friends there Username and Password. The friend will NOT POST...but just read and share the account.

So....is there any way that anyone knows to KNOW if this is happening???? OTHER than watching the IP address of those who log in?????

Also...could this modification be altered to include this service???? IF SO...I would be willing to pay to have that modification done!

LET ME KNOW!

Yours,

Kirk

[white_2kgt]

Originally Posted by MPDev

Try this.

1) Clear your sitewide cookies (IDstack being the key one to delete).
2) Login as User #1. Logout.
3) Login as User #2.

Do you get any error messages?

4) Logout.
5) Login as Admin and check for new PM or post in forum depending on your settings.

I have mine setup to not send a PM, but to post in a forum.

Ok, I've had this installed for some time, it stopped working when I upgraded to 3.6x from 3.5x, today I decided to try and make it work again. Nothing made it work until I did this, how do you suggest I convince those using multiple accounts to clear their cookies? Is there something I can do to force it? (that would probably get annoying to everyone else though...) maybe you can fix it so this isn't a problem?

[4yBak]

how to prevent double detecting for the same peoples?

Example: I have on board 2 users that work at the same computer and each time I receive detect information.