Need help ASAP for Police Help!!!!! Are a User IP Addresses Listed Chronologically?

[maoz440]

A user on my forum has made a very serious threat to shoot another kid at school on Monday. I am helping his local police investigate his identity. Among other things I sent the investigator a list of all IP addys the kid has used to log on. Is there a little hack or piece of code I can run to correllate a list of IP address (from a user's admin panel profile) to a list of dates? Any timely help is greatly appreciated as time is of the essence.

Thanks.

[Dean C]

Wow it sounds very serious. Someone will help you very shortly i hope

- miSt

[Xenon]

open admin/user.php find this block:

PHP Code:

// ############################# douserid() #########################
function douserid($userid,$previpaddress,$depth=2) {
  global $DB_site,$session;

  $depth--;

  $getusername=$DB_site->query_first("SELECT username FROM user WHERE userid=$userid");
  echo "<ul>";

  $ips=$DB_site->query("SELECT DISTINCT ipaddress FROM post WHERE userid=$userid AND ipaddress<>'' AND ipaddress<>'$previpaddress' ORDER BY ipaddress");
  while ($ip=$DB_site->fetch_array($ips)) {

    echo "<li>$ip[ipaddress] (".gethostbyaddr($ip[ipaddress]).") ".makelinkcode("find more users for this ip","user.php?s=$session[sessionhash]&action=doips&ipaddress=$ip[ipaddress]")."</li>\n";

    if ($depth>0 and $ip[ipaddress]!=$previpaddress) {
      doipaddress($ip[ipaddress],$userid,$depth);
    }

  }

  echo "</ul>";

} 


and change it into:

PHP Code:

// ############################# douserid() #########################
function douserid($userid,$previpaddress,$depth=2) {
  global $DB_site,$session;

  $depth--;

  $getusername=$DB_site->query_first("SELECT username FROM user WHERE userid=$userid");
  echo "<ul>";

  $ips=$DB_site->query("SELECT DISTINCT ipaddress, dateline FROM post WHERE userid=$userid AND ipaddress<>'' AND ipaddress<>'$previpaddress' ORDER BY ipaddress");
  while ($ip=$DB_site->fetch_array($ips)) {

    echo "<li>".date("H:i m-d-Y", $ip[dateline]). ": $ip[ipaddress] (".gethostbyaddr($ip[ipaddress]).") ".makelinkcode("find more users for this ip","user.php?s=$session[sessionhash]&action=doips&ipaddress=$ip[ipaddress]")."</li>\n";

    if ($depth>0 and $ip[ipaddress]!=$previpaddress) {
      doipaddress($ip[ipaddress],$userid,$depth);
    }

  }

  echo "</ul>";

} 


think this should do what ya wanted

[maoz440]

Worked Perfectly Xenon - exactly what the inspector needed! Thanks so much! I'll keep you posted on what develops with this sad situation.

maoz

[Dean C]

Xenon what does that code do btw ?

- miSt

[Xenon]

@maoz: glad i could help

@Mist: it shows the dateline near the ip when it was used..

[Dean C]

Ahhh cool Thanks bud!

- miSt

[Erwin]

That serious stuff. Hope they catch the guy.

[Logik]

/me watches the TV show "Cops".
"A vBulletin killer on the loose!"

[Xenon]

@Logik: i think this is a theme where you shouldn't make any fun of it...

just calm down a bit, not every thread needs your comments!