Administrative and Maintenance Tools - [4.1.x-4.2.x] Notify when config.php changes

If you want support, please mark as installed. If you install, please mark as installed

!!MOD UPDATED DUE TO INAVLID SETTING CONFIG - IT WILL WORK NOW!!

This mod is for vBulletin 4.1.x - 4.2.x

This mod will allow you to specify users that will get stopped if the config.php file is modified.

This is useful as a security tool, as most hackers would go for the config.php file.

You must enable it in it's settings before it will work.

Why Would I want/need this?
The config.php file contains the variables for super admins, as well as those with log pruning/viewing/sql executing permissions. If someone has ftp to your site, they will target this file so they can do whatever they want. Want to risk it? Install now!

Please note: This may cause a slight delay loading the page for people you choose to notify, as it calculates the md5 hash of the config.php file. It shouldn't be too much of an issue though.

Changelog

Version 2.2

Added - Setting to enter config.php location

[liamwli]

Reserved.

[liamwli]

Mod updated - settings not showing fixed.

[GhostHunter2010]

does it work on 4.2.0 mate

[liamwli]

Originally Posted by GhostHunter2010

does it work on 4.2.0 mate

Yup. That is what I am using it on.

[Mrquarter2]

I will try this out. Very nice.

[Prashanth]

it doesnt work 4 me as i dont use the default path for config file if possible u can query class_core to get the new path

[TheSupportForum]

personally i would just do this

.htaccess file in /include

RewriteEngine on

<Files 403.shtml>
order deny,allow
deny from all
</Files>

allow from domainipaddresshere

[liamwli]

Originally Posted by Prashanth

it doesnt work 4 me as i dont use the default path for config file if possible u can query class_core to get the new path

I could add a setting for you to enter the path...

[liamwli]

Originally Posted by simonhind

personally i would just do this

.htaccess file in /include

RewriteEngine on

<Files 403.shtml>
order deny,allow
deny from all
</Files>

allow from domainipaddresshere

That stops people going to it - not checking if it was modified.