Administrative and Maintenance Tools - Multiple account login detector (AE Detector)

Mod of the Month winner!
Top 10 most installed mods for vB3.6!

Same plug-in found here:

https://vborg.vbsupport.ru/showthread.php?t=107566

There are no differences as this plug-in works with both 3.5 and 3.6 versions of vBulletin.

If you are like me and migrated from .threads, a common modification was an "AE detector", a simple mod that saved a cookie of a history of ids logged into on your site. If someone logged into more than one account, you got a PM letting you know that your site was being accessed from multiple accounts.

Over the years this was very helpful in identifying users who were posting under multiple accounts (alter-egos!) and users who would return after being banned.

You might be wondering why I don't use the vbcookie call - well, thats because on logout all vB cookies are cleared, so we need to store a cookie that is not effected by the login/logout process.

New Installation
1. Add New Product with attached XML
2. Go to vBulletin Options -> AE Multiple Login Detection Settings and set your specific settings.

Time to install: Easy - 2 minutes.

Upgrade
If you installed this as a Plug-in manually, you can delete that plugin and install this Product, just make sure to go into the Options and set them accordingly.

I hope you find this useful and will click INSTALL if you use it; should it prove useful to enough people I can look at making this installation more automated without the need for edits and an Admin Options page.

To upgrade you will want to reimport this XML file and edit your options accordingly.

1.0.3
-----
. Added a check to ensure that users weren't deleted when reporting violations
. added htmlspecialchars_uni call to username

Note: I am unable to get the call to construct_phrase with $vbphrase['multiplelogin_alert'] to work reliably, as such the $message variable is still set manually inside the plug-in and not via the phrase. If anyone has an idea of why this might not always work, I'm all ears.

1.0.2
-----
. Updated to include exclusion groups, users
. Changed so PM is sent by ae sender id

1.0.1
-----
. Released as a Product (thank you PHPGeek2k3 for your help)
. Added option to post to a forum versus send a PM (or both)
. All settings moved into Admin Option

1.0.0
-----
Initial release.

[MPDev]

It won't report the same people over and over again unless they are somehow resetting their cookies themselves (like using logout and "clear all cookies" option); for which there is nothing you can do without adding database tracking to the code.

[MPDev]

Originally Posted by voclain

I've installed this...but now I'm UNINSTALLED IT....what I was thinking it did was let me know when a USER was "SHARING" a username and password.

My site is a pay site....the only way you can get in is to pay. So...I'm pretty sure I have several users who have given there friends there Username and Password. The friend will NOT POST...but just read and share the account.

So....is there any way that anyone knows to KNOW if this is happening???? OTHER than watching the IP address of those who log in?????

Also...could this modification be altered to include this service???? IF SO...I would be willing to pay to have that modification done!

LET ME KNOW!

Yours,

Kirk

Right, this does not deal with the "sharing" of accounts; for that you would probably want to use IP tracking over a specific period of time. I have a paysite and it tracks user logins per day per IP and trigger a warning if used more than X times over that 24 hour period. (This is not a vBulletin thing, its a browser password thing).

For that you would need an to track all IPs used to login with timestamps and a checker.

[Alfa1]

Does this add on work well with PHP5.2?

[MPDev]

I'm not aware that the version of PHP has any bearing on the plug-in itself.

[saf-t scissors]

Just one suggestion: how about including the IP address of the machine in the warning message? I added the code $ip= IPADDRESS; up near where it's checking the cookie, then changed the message so it says something like ... sharing the same computer at IP $ip.

[boing]

Problem the search function is having problem after installing this hack and even after uninstalling...

Please help

[Alfa1]

Originally Posted by saf-t scissors

Just one suggestion: how about including the IP address of the machine in the warning message? I added the code $ip= IPADDRESS; up near where it's checking the cookie, then changed the message so it says something like ... sharing the same computer at IP $ip.

I wonder why would you want that? If the pc is on dial up, AOL or another proxy, then many IP's will be used. If not the IP does not add anything. Or does it?

[MPDev]

Originally Posted by boing

Problem the search function is having problem after installing this hack and even after uninstalling...

Please help

This doesn't touch anything to do with "search"; not sure what you are referring to as a "problem" as that's pretty vague.

[Frimon86]

I really like this mod but lemmie try it out first.

I'm completely new to vb so please take it easy on me.

Ignore User IDs
List of user id's to not report multiple logins seperated by ","'s

Does this mean list the user i'd I dont want it to be posted to, because in this field it shows 1, and my user id is 1 because I am the admin, should I remove this 1 or leave it?

[pipin]

Hm,

i'm using this hack reporting to a forum through a special account, which isnt used at all.

But now i noticed that this account has multiple ip-adresses.

Can it be, that the IPs of the users, which are reported as using a multiaccount, are logged for that account by creating the reportthreads?