Go Back   vb.org Archive > vBulletin Modifications > vBulletin 4.x Modifications > vBulletin 4.x Add-ons
FAQ Community Calendar Today's Posts Search

Reply
 
Thread Tools
[DBTech] Two-Factor Authentication (vB4) Details »»
[DBTech] Two-Factor Authentication (vB4)
Version: 1.0.4, by DragonByte Tech DragonByte Tech is offline
Developer Last Online: Mar 2023 Show Printable Version Email this Page

Category: Integration with vBulletin - Version: 4.x.x Rating:
Released: 03-03-2014 Last Update: 12-18-2016 Installs: 83
DB Changes Uses Plugins
Additional Files Translations  
No support by the author.

Two-Factor Authentication lets you ensure only trusted networks have access to your account, by using your smartphone to validate login attempts from new IP addresses.


Why use Two-Factor Authentication?

The most common form of "hacking" a forum today is someone guessing or in some other way gaining access to the password to an administrator account. Even with password protection on your AdminCP and ModCP directory, irreparable harm can be done with an administrator account without needing to log in to any of these locations. Enabling two-factor authentication ensures that only trusted networks can access the accounts of your staff as well as your members.

Our two-factor authentication mod uses Google Authenticator to pair a member's forum account with their smartphone app. A "Recovery Key" shown on-screen during setup ensures that if a member should ever lose their phone, they can regain access to their account.


-------------------------------------------------------------------------------------------

Other addons available @ www.DragonByte-Tech.com/forum
Support posted at our forum is generally answered much quicker.

-------------------------------------------------------------------------------------------

If you like this mod please hit the button to the right ---->

Please remember to click the, button to the right if you installed the mod ---->

What does 'Marking As Installed' do ?

* It helps you to stay on top of updates - members who have installed modifications will be notified by us whenever new updates are available.

*
For security issues - vbulletin.org will contact all members who have installed a modification whenever a security issue is brought to their attention.

* Marking a modification as installed also helps us know how many people are using our work, giving us extra incentive to provide more features and new modifications.

We appreciate the support!

-------------------------------------------------------------------------------------------

Feature List

UserCP Integration
  • Adds a "Two-Factor Authentication" link in the UserCP under "My Account"
  • Displays a page with a button to activate or deactivate the authenticator

Network Verification
  • Logs the IP Address of members who have activated the authenticator
  • Asks for verification code for untrusted networks
  • Blocks forum, AdminCP and ModCP access attempts from untrusted networks

Google Authenticator
  • Uses Google's authenticator to handle the QR barcode and code generation
  • Works on Android and iOS
  • Recovery Key ensures that if you lose your phone, you can deactivate the authenticator

IP Whitelist
  • Adds a new config.php parameter, $config['TwoFactor']['ipwhitelist']
  • Whitelists IPs for all accounts for as long as the IP is in config.php
  • Follows the same rules as the AdminCP "IP Ban" interface for powerful IP management

General / Other
  • Display version number
  • Enter your Affiliate ID


-------------------------------------------------------------------------------------------

This mod displays a copyright notification in the footer of all pages which includes:
  • 1 Link to DragonByte Technologies homepage
  • 1 Link to Product Description page of this modification

Download Now

File Type: zip [DBTech] Two-Factor Authentication v1.0.4.zip (12.3 KB, 185 views)

Screenshots

File Type: jpg 305.jpg (39.9 KB, 0 views)
File Type: jpg 306.jpg (38.7 KB, 0 views)

Show Your Support

  • This modification may not be copied, reproduced or published elsewhere without author's permission.
8 благодарности(ей) от:
Delphiprogrammi, eva2000, Hostboard, LOGECT, Macgiber, Papa Bear, puertoblack2003, TheLastSuperman

Comments
  #2  
Old 03-04-2014, 03:32 PM
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Location: Nottingham, UK
Posts: 23,748
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by AK47- View Post
This shouldn't be permitted....
What isnt permitted is random nonsense accusations.
Please do not make such claims unless you have solid evidence to back them up.

Unless such evidence is presented, I will be deleting these posts.
Reply With Quote
4 благодарности(ей) от:
CharlieDelta, Nano_, Papa Bear, puertoblack2003
  #3  
Old 03-04-2014, 04:39 PM
Gripi Gripi is offline
 
Join Date: Jul 2009
Posts: 164
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Thank you so much..

I really like two factor auth, just like fb with the sms auth code.
Reply With Quote
  #4  
Old 03-09-2014, 07:15 PM
fjeans1 fjeans1 is offline
 
Join Date: Jul 2013
Posts: 22
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

i think it will be best if we can have alternative two factor auth
like email auth so other who dont prefer to link their phone with their
account can use email auth instead

anyway it a great idea and i been looking for something similar for sometime
Reply With Quote
  #5  
Old 03-12-2014, 03:35 PM
Skyrider Skyrider is offline
 
Join Date: Feb 2006
Location: Netherlands
Posts: 1,392
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Is there anyway to see through the AdminCP to see if the user is using the Two-Factor Authentication? Great mod btw.
Reply With Quote
  #6  
Old 03-12-2014, 06:33 PM
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Location: Scotland
Posts: 8,814
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by FF|Skyrider View Post
Is there anyway to see through the AdminCP to see if the user is using the Two-Factor Authentication? Great mod btw.
Unfortunately not at this time. We might introduce a read-only display (something like "Authenticator Activated? Yes/No"), though

---
I decided to rename the class name in order to avoid class name collision, in the event that the user were experimenting with multiple different Two-Factor Authentication modifications to figure out which one is right for their forum.

The Google Authenticator class written by Michael Kliewe A.K.A. PHPGangsta is licensed under a BSD 2-Clause License, A.K.A. "Simplified BSD License" or "FreeBSD License" and permits both derivative works as well as the use of this product in open- or closed-source products.

We have not removed any copyright information from the file and we have made no attempt to take credit for the creation of the class.

For that reason, until we hear from either the copyright holder or a legal representative of the copyright holder, we will proceed to use the file as-is in our project.
If anyone believes we have not followed the terms of the license as laid out, you are free to contact the copyright holder (or the copyright holder's legal representative) and point them to our Contact Us form and we will be happy to work with them to rectify the situation.


Fillip
Reply With Quote
  #7  
Old 03-12-2014, 08:37 PM
Paul M's Avatar
Paul M Paul M is offline
 
Join Date: Sep 2004
Location: Nottingham, UK
Posts: 23,748
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Off topic comments removed, any more will see infractions considered.
Reply With Quote
Благодарность от:
ozzy47
  #8  
Old 03-14-2014, 03:24 AM
nextslit's Avatar
nextslit nextslit is offline
 
Join Date: May 2009
Posts: 40
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Thanks for sharing, this is a great mod, unfortunately it's not working on mobile style!
Reply With Quote
  #9  
Old 04-01-2014, 05:55 PM
DragonByte Tech's Avatar
DragonByte Tech DragonByte Tech is offline
 
Join Date: Feb 2010
Location: Scotland
Posts: 8,814
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Two-Factor Authentication v1.0.1

Changes to Existing Features:
  • Using the "vSA Login To User Account" mod will no longer trigger the authentication requirement


Fillip
Reply With Quote
  #10  
Old 04-02-2014, 10:45 AM
Skyrider Skyrider is offline
 
Join Date: Feb 2006
Location: Netherlands
Posts: 1,392
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Indeed, mobile / Tapatalk support would rock! I do have a question though. Is it possible that you can add something like the XenForo's 2-factor auth?



Showing last devices, etc. I love the way that this works perfectly with steam login.
Reply With Quote
Reply


Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 01:51 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2024, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.05291 seconds
  • Memory Usage 2,347KB
  • Queries Executed 24 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (2)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)modsystem_post
  • (1)navbar
  • (4)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (10)post_thanks_box
  • (13)post_thanks_box_bit
  • (10)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (3)post_thanks_postbit
  • (10)post_thanks_postbit_info
  • (9)postbit
  • (3)postbit_attachment
  • (10)postbit_onlinestatus
  • (10)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • fetch_musername
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • post_thanks_function_fetch_thanks_bit_start
  • post_thanks_function_show_thanks_date_start
  • post_thanks_function_show_thanks_date_end
  • post_thanks_function_fetch_thanks_bit_end
  • post_thanks_function_fetch_post_thanks_template_start
  • post_thanks_function_fetch_post_thanks_template_end
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_attachment
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete