Administrative and Maintenance Tools - Mail Admin When fail to login to admincp V2

hello

Please remember to Click Mark as Installed if you use this modification.

this simple plugin :
it will send you mail when someone try to login at your AdminCP.

How to Install

• Import XML file from your AdminCP
• Click Mark as Installed if you install it !

Control :

• AdminCP -> vBulletin Options -> Send message to Admin when fail to login to admincp options

Note : Arabic translation also attached

What 's new with version 2 :

• work any where not only AdminCP
• custom error message when try to login
• add HTTP_USER_AGENT !
• you can input any username when someone try to login you will mailed!

please remember to Mark it as installed if you like and Nominate for MOTM

[Sunray]

Hi,

Great plugin ! Thanks a lot for it.
Installed and tested in vB 4.04, is working well.

[Delphiprogrammi]

hi,

nice one but couldn't this be made more real by the "VB_AREA" define something like

PHP Code:

if(defined('VB_AREA') AND (VB_AREA == 'admincp'))
{
    //****
} 


[OcR Envy]

This is extremely misleading. You aren't checking if they are logging into the AdminCP at all. You're checking to see if they failed to login anywhere on the site. Poorly executed.

[Delphiprogrammi]

Originally Posted by OcR Envy

This is extremely misleading. You aren't checking if they are logging into the AdminCP at all. You're checking to see if they failed to login anywhere on the site. Poorly executed.

i agree through it doesn't send an email when the "normal login" fails hmm i don't get it...

[Delphiprogrammi]

hi,

problem solved for those people that get emailed when there normal login fails open the plugin and the first line

PHP Code:

if($vbulletin->options['madkour_admin_login_fail_onoff'])
{ 


above that add

PHP Code:

if(!defined('VB_AREA'))
{
      die("error");
} 


underneath the first code snippet code add

PHP Code:

VB_AREA ='AdminCP'; 


that's it now you only get emailed when the actual admincp login fails for some reason look at /includes/adminfunctions.php if you want more information about the VB_AREA constant

[0verl0rd]

Awesome! thanks!

[Ary Braga]

Originally Posted by Delphiprogrammi

hi,

problem solved for those people that get emailed when there normal login fails open the plugin and the first line

PHP Code:

if($vbulletin->options['madkour_admin_login_fail_onoff'])
{ 


above that add

PHP Code:

if(!defined('VB_AREA'))
{
      die("error");
} 


underneath the first code snippet code add

PHP Code:

VB_AREA ='AdminCP'; 


that's it now you only get emailed when the actual admincp login fails for some reason look at /includes/adminfunctions.php if you want more information about the VB_AREA constant

underneath????/

PHP Code:

if($vbulletin->options['madkour_admin_login_fail_onoff'])
{ 


Could put the code here ready?

I tried and failed. excuse my ignorance.
Parse error: syntax error, unexpected '=' in /home/clangsm/public_html/vb/login.php(114) : eval()'d code on line 5

Correct me if I'm wrong

PHP Code:

if(!defined('VB_AREA'))
{
die("error");
}  
VB_AREA ='AdminCP';
if($vbulletin->options['madkour_admin_login_fail_onoff'])
{ 


[Delphiprogrammi]

hi,

no you did it wrong it must be

PHP Code:

if($vbulletin->options['madkour_admin_login_fail_onoff'])
{
      VB_AREA =='AdminCP';
      // the rest of the code here(already there)
} 


the first block is needed because if the VB_AREA constant is not defined PHP will throw error messages

[Ary Braga]

wow.

Thank you very much.
U save my day.

Regards.

[Delphiprogrammi]

hi,

I just noticed the plugin author is using values directly from $_POST[] superglobal array.This is a bad programming attitude certainly without any form of sanitization this could lead to XSS security holes he should use

PHP Code:

$vbulletin->GPC['variablename'] 


at least this way you're sure the values being submitted are clean