Miscellaneous Hacks - vB Dummy ACP 1.0.0

vB Dummy ACP

This addon will allow you to create as many dummy acps as you like. The dummy acp acts exactly like your true admincp, but it will not allow anyone to login through it, even if the username and password provided are correct.


Features

• Acts just like real admincp login
• Can automatically defend against detection (explained below)
• Won't even allow real admin logins
• Easily create as many dummy acps as you like
• Will work without plugins enabled (partially)

Defense Against Detection

In order for the dummy acp to be of any use, I've made it impossible to detect being a "dummy". This is done through the following methods:

1. File Check
The dummy acp checks the file being requested to see if it exists in the true admincp directory, so if a user requested dummyacp/plugin.php, they would see a login despite there being no plugin.php in the dummyacp folder. If they request a file that is not in the true admincp directory, a 404 error is shown.

2. Login Validation
You may know, that normal forum members who try to login to the acp will see the successfully logged in page, but then redirect back to the login page. The dummy acp keeps this functionality instead of completely blocking all logins. It will only show the login error page under two circumstances:

1. The login provided is actually wrong
2. The login provided is real, but an administration login


Note
While this will work without plugins enabled, if plugins are not enabled then the dummy acp will show users who login successfully with an admin login a successful login page, but -still- redirect them to the login page. So while they may not actually gain access to your admincp, someone trying to get into your forum would know your login works.

[Deceptor]

Reserved

[dtv100]

thanks you becoming one of my favorite coder.
gone try it with 3.7.4 and report later

all that secure a website is love by me.

[F0xy]

what a brilliant idea, thanks

[dtv100]

so far seen to work with 3.7.4 thanks

[Deceptor]

Glad to hear it dtv100, I'll probably release it in the 3.7 section too then

[Megatr0n]

Deceptor, what's the purpose of this hack?

I am confused.

[Deceptor]

In short, a trick, for security

One of the things you can do to secure your vBulletin install is change the admincp/ directory to something else, so no one knows where your admincp URL is. With this, you can put up a dummy acp in its place, making people believe this dummy is the real one, and no matter what, not be able to log in

[TheLastSuperman]

Very nice Deceptor, I was getting ready to do this:

https://vborg.vbsupport.ru/showthread.php?t=197510

And this will help! took some of the work out of it and I like how you mentioned it's pretty much untraceable as a fake... Nice!

Thanks for all the recent mods and look for an install shortly

Plus... loved to see the names Deceptor and Megatron back to back... ohh the memories of autobots and deceptacons lol! WHAT?!?!? lol

[Megatr0n]

Originally Posted by Deceptor

In short, a trick, for security

One of the things you can do to secure your vBulletin install is change the admincp/ directory to something else, so no one knows where your admincp URL is. With this, you can put up a dummy acp in its place, making people believe this dummy is the real one, and no matter what, not be able to log in

Awesome!!