Email notification if someone attempts to access your Admin CP

This is my version of the hack that Firefly released for VB2.

VB3's standard log of failed admincp login attempts is a nice feature.. but since you get no instant notification, by the time you check the log it could be too late. Also, the log doesn't show which passwords the potential intruder is trying... If someone is close to guessing my password I wanna know about it!

What does it do? With this hack, when someone tries to login to your admincp or modcp you'll get an email that contains the username they tried, the password they tried, their ip address, hostname, # of strikes, referer, script, and the date & time of the attempt.

It will look something like this:

--------------------------------------------------
WARNING: Failed admin logon in vBulletin 3.0.1
--------------------------------------------------
Someone is trying to login to your Admin CP!

Username tried: JimbobJoe
Password tried: aCcEsS
IP Address: 67.13.27.156
Host: asd691917124.whatever.com
Strikes: 1/5
Referer: http://www.yoursite.com/forums/admincp/
Script: http://www.yoursite.com/forums/login.php
Date: Wednesday 28th of April 2004 07:50:02 AM
--------------------------------------------------

If the person who is attempting to access your CP happens to be registered & logged in, this line will also be included in the email:

vBulletin has identified this user as: (intruder's real username here)

(Thanks to AlexanderT for the idea for this addon.)


Update (1-4-05): A couple of users have expressed concern about this mod sending a plaintext password over http for all logins. This update (v1.1) addresses that concern by only sending the password for cplogins. To update just re-do the first step in the instructions for your vbulletin version (the first edit to adminfunctions.php). Or if you'd prefer that the attempted password not be sent at all simply skip the edits to adminfunctions.php.

If you don't recieve an email when testing, make sure you have the webmaster email set in the admincp (vBulletin Options + Site Name / URL / Contact Details). Also, sometimes it takes a while for the email to arrive. So give it plenty of time before screaming "it doesn't work"..

Still not working? Read this!

Credits: Thanks to the original creator of this hack (Chen) for the idea, and thanks to Boofo for helping me test it.

[9mmPrincess]

Originally Posted by flyertalk

Works for me on version 3.0.0! Excellent stuff, thanks!

installed, tested, works great, muchas gracias

[9mmPrincess]

one thing-is it possible to get this for the modcpanel too?

[Lee]

I installed the version of the hack for 3.0.3 and when I go to test it by logging in with a wrong password, I get a white screen with this:

Fatal error: Call to undefined function: log_vbulletin_error() in /home/hsphere/local/home/projectp/projectprotect.org/forum/login.php on line 184

Any idea's on where I wen wrong?

Thanks!

[Lee]

Originally Posted by speedpro50

I installed the version of the hack for 3.0.3 and when I go to test it by logging in with a wrong password, I get a white screen with this:

Fatal error: Call to undefined function: log_vbulletin_error() in /home/hsphere/local/home/projectp/projectprotect.org/forum/login.php on line 184


Any idea's on where I wen wrong?

Thanks!

Oh wait - I guess that is what it is supposed to do - I just got 3 emails telling someone (me) tried to login with an invalid password!

Okay okay, I am learning...THANKS FOR THIS HACK!

[EvilLS1]

Originally Posted by 9mmPrincess

one thing-is it possible to get this for the modcpanel too?

It already does that.

speedpro50,
You shouldn't be getting that error. Check to make sure that you didn't accidentally remove this line of code:

// log this error if attempting to access the control panel
require_once('./includes/functions_log_error.php');

If that line is there then try temporarily removing this hack and see if it still happens when trying an incorrect password. This hack makes no changes or calls to that function so I'm guessing that the error will still be there even with it removed.

[9mmPrincess]

Originally Posted by EvilLS1

It already does that.

.

lol-i checked, and so it does great hack :devious:

[EvilLS1]

Originally Posted by 9mmPrincess

lol-i checked, and so it does great hack :devious:

Thank you.

[Hiro]

Someone is trying to login to your Admin CP!

Username tried: Psycho
Password tried:
IP Address: ***.***.***.***
Host: ***.***.***.***
Strikes: 1/5
Referer:
Script: http://www.teenagechaos.com/login.php
Date: Sunday 08th of August 2004 03:48:04 PM
vBulletin has identified this user as: Psycho

Amazing hack man!!!!

[EvilLS1]

Thank you, but credit for the concept goes to Chen.

[weirdpixels]

thanks for bring this hack to vb3
*installs