Security: Admin IP Address Log and Compare

This product will add a security feature into your admincp. When you log into your admin account, your IP address will be logged. On the main admincp index page your current IP address along with the previously logged IP will be shown plus a compare status. This will allow you to check if anyone else has been logging into your account without you knowing, and therefore take the necessary precautions to avoid it happening again.

There is purposly no pruning feature inbuilt, to avoid the possiblity of an unauthorised user taking advantage of it. Of course if your config settings allow you to execute DB queries within your admincp, then unauthorised users could modify the logged ips. I suggest you turn it off by editing includes/config.php and making sure the setting below has no userid's

PHP Code:

$config['SpecialUsers']['canrunqueries'] = ''; 


You can install a seperate script to run queries eg "phpmyadmin"

Stats

Installation Time: 1 Minute
Added Queries: 1 on specified admin login, 1 on admincp homepage
One Off Queries: 1 on installation, 1 on uninstallation
Added DB Tables: 1
Added Phrases: 5
Added Settings: 1

Installation Instructions

1. Simply upload the product
2. Modify "Admin IP Address Checker Box" Setting in vBulletin Options
3. Click Install

To-Do List

Add Multiple admin support
Add dynamic IP support
Add IP Exceptions list


Screenshots are below

[projectego]

Nice idea.

[Rickie3]

great idea cheers *installed*

[hotwheels]

schweet........

[hotwheels]

It locked me out of my site......Can you please post or pm me the mysql database code? I tried to remove the admin_ip_checker and i can't get into my site still.

Database error in vBulletin 3.5.4:

Invalid SQL:

INSERT INTO vb3admin_ip_checker
(id, ipaddress)
VALUES ('', '69.146.155.79');;

MySQL Error : Table 'hotwheel_forums.vb3admin_ip_checker' doesn't exist
Error Number : 1146
Date : Tuesday, June 20th 2006 @ 11:01:37 AM
Script : http://www.insanemustangs.com/forums/login.php
Referrer : http://www.insanemustangs.com/
IP Address : ********
Username : *******
Classname : vb_database

[hotwheels]

I found it in the xml file............thanks

[Xenium]

Originally Posted by hotwheels

I found it in the xml file............thanks

Glad that you got it sorted out Odd that it didnt add the table on installation of the product though.

[hotwheels]

when it wrote the table for my site, it wrote

admin_ip_checker

instead of

vb3admin_ip_checker

so i just took

CREATE TABLE `admin_ip_checker` (
`id` INT( 15 ) NOT NULL AUTO_INCREMENT ,
`ipaddress` VARCHAR( 15 ) NOT NULL ,
INDEX ( `id` )
) TYPE = MYISAM

and changed it too

CREATE TABLE `vb3admin_ip_checker` (
`id` INT( 15 ) NOT NULL AUTO_INCREMENT ,
`ipaddress` VARCHAR( 15 ) NOT NULL ,
INDEX ( `id` )
) TYPE = MYISAM

Work's perfectly now..........I think it is just the way mysql is set up.......

[Xenium]

Originally Posted by hotwheels

Work's perfectly now..........I think it is just the way mysql is set up.......

Nope. It's my fault. I forgot to add table prefix to the install and uninstall code. I've updated the file now.

Change your uninstall code to the following.

PHP Code:

$db->query_write("DROP TABLE " . TABLE_PREFIX . "admin_ip_checker"); 


That will avoid any problems when you want to uninstall the product. Or you could change the name of the table you created in phpmyadmin to admin_ip_checker, then uninstall the product and reinstall the updated file.

[hotwheels]

Thanks, i appreciate the update.........