vBulletin Mods

About this hack:
This hack will log the userid, username, ipaddress, where the login is, and time all your users log onto your forum.

Installation information on hack:

• Files edited: 0
• Templates edited: 0
• Files to upload via FTP: 2
• Time to install: 1 minute max

Updates:

Version 2.0 (08/25/06):

• First release of this hack for vb3.6.

cool thank you :-)

Can this hack be used for the following situation? At the mainsite I would like members be able to log in to the forum and be directed to the forum.

Not sure your question.

Thanks for the update. I recommend this hack for your site's security so you can see if anyone's account gets hijacked, and also to catch people who have clone accounts.

Where is the log located with this new version? It used to be located in admincp->Statistics & Logs with the older version for vBulletin 3.5.

There also now.

I see it now. It didn't show up right away after installing. Maybe you have to refresh your browser window or log out and then back in in order to see it in the admincp.

Although i was using your other 1 for 3.5 i have upgraded it to this 1 now, thanks abe...

The only diff now is that there is version check and a link to this page.

Excellent. Seems to be useful. :)

Is it supposed to log cookie logins as well? I don't see them.

I installed this hack as told, but i can't see it . Emptyed the cache and refreshed the page severall times, but it didn't help. :squareeyed:

Any way of logging guest ips?

It doesn't log cookie logins.

99% of all logins are cookie logins and they are not logged...

Awesome, thanks!

Great Hack!
Many thanks.
Is it possible to add a function to the hack which allows to search only for logins of a specific IP Address or part of IP?
Also a sort by IP Address would be very nice ;)

I have installed this one and will test it to consider if I will keep it installed. Thanks!

This hack only logs when someone uses a username and password. Every time a user goes from one page to another they use a cookie.

I'll see what I can do.

I can be wrong, but they use sessions between pages and cookies only for logins.

If you take a look at includes/class_core.php, function vB_Session(), there is such piece of code:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

I think if you insert your log function after this line it should log cookie logins. I tested it a bit and it seems like a right place.

Session if you have the session in the url becuase you are a guest or have cookies disabled. Other wise you would use cookies.

When you go from page to page they try to read a session (from url or cookies), if it exists then they associate user with this session. Only if it doesnt exist they try to authenticate user from the cookie as you can see in that part of the code. This is the place where log function can be placed and it will log cookie authorizations (it is not reading sessions).

Anyway, I think I will just go ahead and make the required changes.

Quick solution for those who want this mod to log cookie logins as well (UNOFFICIAL, UNSUPPORTED, USE AT YOUR OWN RISK etc.).

The only minor issue after the following modification is that when user logs in using a standart login form it will log this twice - as a standart login and a cookie login. I don't want to modify this hack too much, so I left it as it is.

1. Open product-log_logins.xml and find:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

add below:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

2. Open loginlog.php and find:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

add below:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

3. Open includes/class_core.php and find:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

add below:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

4. Reinstall product.

Great hack,
Why not to make the admin have options
* Log Success Logins
* Log Error Logins
* Log All Logins

Beacuse for me I dont find it usefull to log the successed logs, but error logins would be help full for me to track, more over to make it show in the AdminCP under the waiting moderation list in the main page of AdminCP with the Total No. of login logs, so the admin will know whats going on with the users.

An error login is not a login.

Yep,
I remember before there was a hack which sends an e-mail to the admin if some one try to access the AdminCP this e-mail have the user name, password and also the ip address which was used to access it.
So if the admin was able to track error login tries he will be able to warn the user and so on to reduce the ability of stolen user names.

vBulletin has a way to log all failed logins to a log file. It is in admincp->vBulletin Options->Error Handling & Logging->Log Failed Admin Control Panel Logins to a File

Useful hack.
Thankyou. :)

Ill try to explain it better.

At my website www.myurl.com/forum I have a vbulletin forum. Members can log in from there. But they visit the website www.myurl.com itself a lot. So on the mainpage www.myurl.com/index.html I would like to have the option that members of the forum be able to log in from the mainpage the www.myurl.com/index.htm :)

Now I got it to work that people who are a member of the forum can log in on the mainpage www.myurl.com/index.html but only one problem there that I don't know how to fix. So the problem is this :


When a member visits the mainpage, he wants to log in to the forums. He logs in ( you get the vbulletin message that you are logged in) but you stay at the mainpage. So you log in on the www.myurl.com/index.html, the logging in part works, but it doesn't bring you to the www.myurl.com/forum. You just stay at the www.myurl.com/index.html

What I want :

mainpage (index.html) > log in > leads to forum

What the problem is :

mainpage (index.html) > log in > mainpage (index.html)

S-w-e-e-t! Although the current Admincp will log failed attempts on itself, getting an email is MUCH better. Any idea who did the hack before you're referring to?

I think you are looking for this:
http://www.vbulletin.org/forum/showthread.php?t=96921

Very, Very useful!! I love it. Thank you!

-CYVOK-

Thanks for this dude. Fantastic hack and wll help secruity :)

i'm dont think this problem is because of this hack.

I also would like to see Error Logins and who tried to log in as who, this way we can see who is trying to hack into accounts

nice

is it possible to know that 1 username was log by several IP at the same time?

I feel ashame but I've done everything explained and I don't know where to find the log and/or where to manage this hack. :alien:

Could someone just tell me where to find it ? :confused:

Look in the screenshots.

Just forgot to refresh the page :o

When I type in to search for just one username, all usernames still come up.


???

This hack... logs user passwords too? thnks

no, it doesn't

Oh :(, does any hack do that? (log users´passwords)

Not that I know of, and it would *really* surprise me if anyone would ever write such a modification. I can think of *no* valid reason to want your user's passwords. Why do you want to log your users passwords?

What do you mean? In the log page?

Sorry, I wouldn't do it. It's definitely possible but please let me know what site you have so I know NOT to go there. just in case you found out how.

I want to know if any of my moderators change his password, because they cant do it, (internal forum team rules).

.. what's the logic behind that?

There are some users, which are not used to write, only moderate; and this users are shared by some people. And some months ago someone changed a password, and i couldnt know who.
When logging passwords, if this occures again, i can see which IP loged first with a changed (new) pass.

Sorry for my bad enlgish.

There is a usergroup option to log old passwords in vb. Maybe this can help you. It logs it encrypted but maybe keeps a date.

When I click on the Log Manager it tells me "No log file defined in vBulletin Options" What do I do? TIA

Not sure what you mean.

Installed... we will see how it goes. So far I've tried to look into 2 accounts that I know have shared at least 1 from before, but it doesn't show anything ??

... what? All this modification does is write a log entry when someone logs in.

Oh. I thought i would show when they log into each others accounts..lol. Sory!!

For that, check here.

Yeah I have that... lol I dunno what I was thinking!! Thanks.. :D

Has anyone else tried this edit below to the mod with 3.6.4? Does it work well?

-vissa

Yes, it works perfectly on 3.6.4 for me.

The edit to include cookies (not part of the original mod) does not work properly for me. Or perhaps it works but not as it should. For example, I'm seeing 20 entries for the same user in 5 minutes (apparently as they go from page to page). Those are not cookie logins, they are just cookie sessions. I was hoping it would take into account when they were last inactive (for the cookie timeout) and not create so many duplicates. Essentially this is now logging every page access by every user, which on a huge forum like mine will fill up super fast and take up resources.

-vissa

I just double checked my installation, and it is definitely *not* doing that. I then checked the code... and it should *definitely* not be doing that, if your session management is working right -- I don't think that it should authenticate against the cookie unless the session does not already exist (which is the ($gotsession == false or {blahblahblah}) parameter surrounding where this is placed). Are you sure that you put it in exactly the right spot, and you didn't by chance put it below the two closing curly brackets (})?

Thanks for the reply -- I'll double check, but I'm pretty sure it's in the right spots. I do have vbseo installed which may change things up a bit.

-vissa

By the way, I'm noticing this happening mostly on accounts that are using AOL (proxy/cache) and the IP address changes almost every minute (I do have IP info and proxy to real IP installed).

-vissa

In that case (just brainstorming), the AOL accounts might be not maintaining the session, and are instead authenticating against the cookie on every page load... which sounds like it would be a nightmare. I've not experienced that on my forum, and I also have quite a few AOL users.

Do you use any of the mods I've mentioned (proxy to ip, vbseo, etc)?

-vissa

No.

This is great!

Installed.

Downloaded it installed but I still dont see it. All I see at the statistics and log manager are the sameones that where their before. I dont log logins hack anywhere. Unless Im missing something lol.

Did you upload the xml file? You should see a link to log-logins. Also, check your database.

Be sure you are uploading the files correctly.
I did the same thing :o

Oops working now thanks.

Saturday - I got everything loaded and after closing AdminCP and logging back in, I could see a very short login list. - The hack worked.

Monday - I attempted to view the list and received a 404 error.
Tuesday - I attempted again.
Today - Same 404 error. I completely reinstalled the hack, logged out and back in and now it works and I see logs dating back to Saturday. I'm at a loss.

Maybe you had deleted the file?

Nope....nothing deleted.

It happened again.

Last night I did a full uninstall and then a reinstall and everything worked as it's supposed to. I had a log dating back until Saturday when the hack was first installed.

This morning I log in and attempt to check the log, and I get the standard "HTTP 404 - File not found" error screen.

Everything else works and I don't see any other changes. I checked the control panel log and there are no entries after that install. :confused:

Knowing oh so little of all this, could it be an Access Rights on your Server somehow?

Meanwhile, Abe1 I just wanted to say THIS MOD is working perfectly on my vB3.6.4 Many Thanxx!

If that was the case, why would it work the first time, but not the next day?

Database error in vBulletin 3.6.5:

Invalid SQL:
ALTER TABLE `logins` ADD `logintype` TINYTEXT NOT NULL;

MySQL Error : Duplicate column name 'logintype'
Error Number : 1060
Date : Tuesday, April 17th 2007 @ 04:52:32 PM
Script : http://www.*******.com/admincp/plugi...=productimport
Referrer : http://www.*******.com/admincp/plugin.php?do=productadd
IP Address : XX.XXX.XX.XX
Username : forumadmin
Classname : vb_database


I had this installed on my site before. Had a db crash. Got everything back up went to install the product again and get this.

Any ideas. Thanks.

Can you uninstall then re-install?

Doest show installed. That is the problem.

Had a DB crash. Was able to get a partial restore. And just have building on that.

Can you uninstall it?

It does not show installed.

It was previously installed.

Had a DB crash.(this is where it was installed)

Restored most of the Database.

Ending up having to complete start a new forum. Use Impex to get my users and forums. (lost all post,pm,plugins.)

Rebuilt from there.

Now when I attempt to install I get the error above.

Remove the code in the install part from the XML and then upload again.

Worked You all are the greatest.

Bonjour

Merci beaucoup pour ce hack

@++

Works great!

however I'm having security issues with users trying to log in to other peoples accounts. Failing, But trying. I've had several email complaints from the users who had emails sent to them stating someone tried logging into their account.

Actually, I just wrote it myself. using your code as a base. Here are the mods I did.


My hack for Logging Failed attempts


Two files now need to be modified to enable it. (Backup everything first)

First
./includes/function_login.php

Now look for the section for "Exec_strike_User". there will be a query inserting a strike into the system. Right before or after the code "$strikes++;" add the following code.

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

Save and update the file.


Now modify the following file
./adminCP/loginlog.php

Find the while loop

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

and add

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

now when you view the page, all failed logins will appear.

Is it possible to modify the options of this hack to create a log file of all failed logins?
Would be good to be able to see the amount of attempts (reoccuring) on a single account.

Great hack. Installed. :D

Would be a seperate hack. I'll see if I can creat something. I don't know if I would use a file though.

Thanks for this mod. I have a question. Can this mod back track logins prior to installation of the mod, or can it only see logins after it was installed?

It only works for those logins which occur after the installation of the mod. And it doesn't record automatic cookie logins.

i tried everything can not see it in admin panel
thanks but did not work

Does it still work in 3.7?

It's working fine for me on vBulletin 3.7.

You done good... Thanks

GO TO STATISTICS & LOGS!

looks good ... like an earlier poster said it wont show up automatically after installing, just hit F5/refresh after installing and now it'll show up as "Log Logins Hack" under "Statistics and Logs" section of the admin cp ...

Thanks for the hack - nice work!

-kenc

Looks like it's working fine on 3.6.8 Thank you very much!

Essential info, many thanks.