Ip Restriction

[Nocturnal222]

How can restrict ip search on members of a certain usergroup or no depth 2 search for them? Especially the administrators? Both on Admin Control Panel and Moderator Panel.

I know its something to do with user.php on both folders, but i do not know how?

Help please.

thanks

-m

[Nocturnal222]

anyone?

--------------- Added [DATE]1302809369[/DATE] at [TIME]1302809369[/TIME] ---------------

PHP Code:

// ############################# start do ips #########################
if ($_REQUEST['do'] == 'doips')
{
    if (function_exists('set_time_limit') AND !SAFEMODE)
    {
        @set_time_limit(0);
    }

    $vbulletin->input->clean_array_gpc('r', array(
        'depth'     => TYPE_INT,
        'username'  => TYPE_STR,
        'ipaddress' => TYPE_NOHTML,
    ));

    if (($vbulletin->GPC['username'] OR $vbulletin->GPC['userid'] OR $vbulletin->GPC['ipaddress']) AND $_POST['do'] != 'doips')
    {
        // we're doing a search of some type, that's not submitted via post,
        // so we need to verify the CP sessionhash
        verify_cp_sessionhash();
    }

    if (empty($vbulletin->GPC['depth']))
    {
        $vbulletin->GPC['depth'] = 1;
    }

    if ($vbulletin->GPC['username'])
    {
        $getuserid = $db->query_first("
            SELECT userid
            FROM " . TABLE_PREFIX . "user
            WHERE username = '" . $db->escape_string(htmlspecialchars_uni($vbulletin->GPC['username'])) . "'
        ");
        $userid = intval($getuserid['userid']);

        $userinfo = fetch_userinfo($userid);
        if (!$userinfo)
        {
            print_stop_message('invalid_user_specified');
        }
    }
    else if ($vbulletin->GPC['userid'])
    {
        $userid = $vbulletin->GPC['userid'];
        $userinfo = fetch_userinfo($userid);
        if (!$userinfo)
        {
            print_stop_message('invalid_user_specified');
        }
        $vbulletin->GPC['username'] = unhtmlspecialchars($userinfo['username']);
    }
    else
    {
        $userid = 0;
    }

    if ($vbulletin->GPC['ipaddress'] OR $userid)
    {
        if ($vbulletin->GPC['ipaddress'])
        {
            print_form_header('', '');
            print_table_header(construct_phrase($vbphrase['ip_address_search_for_ip_address_x'], $vbulletin->GPC['ipaddress']));
            $hostname = @gethostbyaddr($vbulletin->GPC['ipaddress']);
            if (!$hostname OR $hostname == $vbulletin->GPC['ipaddress'])
            {
                $hostname = $vbphrase['could_not_resolve_hostname'];
            }
            print_description_row("<div style=\"margin-" . vB_Template_Runtime::fetchStyleVar('left') . ":20px\"><a href=\"usertools.php?" . $vbulletin->session->vars['sessionurl'] . "do=gethost&amp;ip=" . $vbulletin->GPC['ipaddress'] . "\">" . $vbulletin->GPC['ipaddress'] . "</a> : <b>$hostname</b></div>");

            $results = construct_ip_usage_table($vbulletin->GPC['ipaddress'], 0, $vbulletin->GPC['depth']);
            print_description_row($vbphrase['post_ip_addresses'], false, 2, 'thead');
            print_description_row($results ? $results : $vbphrase['no_matches_found']);

            $results = construct_ip_register_table($vbulletin->GPC['ipaddress'], 0, $vbulletin->GPC['depth']);
            print_description_row($vbphrase['registration_ip_addresses'], false, 2, 'thead');
            print_description_row($results ? $results : $vbphrase['no_matches_found']);

            print_table_footer();
        }

        if ($userid)
        {
            print_form_header('', '');
            print_table_header(construct_phrase($vbphrase['ip_address_search_for_user_x'], htmlspecialchars_uni($vbulletin->GPC['username'])));
            print_label_row($vbphrase['registration_ip_address'], ($userinfo['ipaddress'] ? $userinfo['ipaddress'] : $vbphrase['n_a']));

            $results = construct_user_ip_table($userid, 0, $vbulletin->GPC['depth']);
            print_description_row($vbphrase['post_ip_addresses'], false, 2, 'thead');
            print_description_row($results ? $results : $vbphrase['no_matches_found']);

            if ($userinfo['ipaddress'])
            {
                $results = construct_ip_register_table($userinfo['ipaddress'], $userid, $vbulletin->GPC['depth']);
            }
            else
            {
                $results = '';
            }
            print_description_row($vbphrase['registration_ip_addresses'], false, 2, 'thead');
            print_description_row($results ? $results : $vbphrase['no_matches_found']);

            print_table_footer();
        }
    }

    print_form_header('usertools', 'doips');
    print_table_header($vbphrase['search_ip_addresses']);
    print_input_row($vbphrase['find_users_by_ip_address'], 'ipaddress', $vbulletin->GPC['ipaddress'], 0);
    print_input_row($vbphrase['find_ip_addresses_for_user'], 'username', $vbulletin->GPC['username']);
    print_select_row($vbphrase['depth_to_search'], 'depth', array(1 => 1, 2 => 2), $vbulletin->GPC['depth']);
    print_submit_row($vbphrase['find']);
} 


how can i add, if user is an admin, ip search is restricted?

--------------- Added [DATE]1302849027[/DATE] at [TIME]1302849027[/TIME] ---------------

add a code on this php code, to restrict supermods from searching ips of admin (usergroupid 6)

[Yellow Slider]

Place the following code before if ($vbulletin->GPC['ipaddress'] OR $userid)

PHP Code:

if (is_member_of($userinfo, 6) AND is_member_of($vbulletin->userinfo, 5)) print_cp_no_permission(); 


[Nocturnal222]

Originally Posted by Yellow Slider

Place the following code before if ($vbulletin->GPC['ipaddress'] OR $userid)

PHP Code:

if (is_member_of($userinfo, 6) AND is_member_of($vbulletin->userinfo, 5)) print_cp_no_permission(); 


this would restrict supermods on searching ip of admins in admincp panel, right?

[Disasterpiece]

you could easily replace the numbers with the usergroup ids you want to lock out from the process.
multiple usergroups can be joined with the

PHP Code:

... AND is_member_of($vbulletin->userinfo, 5) 


part