Register Members List Search Today's Posts Mark Forums Read

Reply
 
Thread Tools
  #1  
Old 16 Mar 2015, 23:27
amreboot amreboot is offline
 
Join Date: Jul 2013
Disable Failed Login Notifications

I have searched everywhere, how do I disabled the "Failed Login Notifications" from being sent to members?

We are seeing a VERY large increased amount of malicious attempts from various countries in trying to gain access to members' accounts.
I have blocked several countries from the forum via the .htaccess file, but there are just too many countries doing this, including the USA.

At this point, I would like to simply disable the email notification from being sent.

How do I do this?
Reply With Quote
  #2  
Old 16 Mar 2015, 23:39
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
There is no setting to disable them. If you wanted, you could edit file includes/functions_login.php and in function exec_strike_user(), around line 109, find this code:

Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.


and add the two forward slashes (in red) before the vbmail line.

I'm also working on a couple of mods that might help with this. One will allow human verification on login (after a configurable number of strikes) so that hopefully the guessers (assuming they're automated) will not be able to generate 5 strikes. The other one will just allow you to disable the email sending without editing a file (and maybe also give options for other types of notification, if I can get around to it).
Reply With Quote
  #3  
Old 17 Mar 2015, 03:19
John Lester's Avatar
John Lester John Lester is offline
 
Join Date: Nov 2004
Hmmm a soft 3 strike triggering a q & a before the hard 5 strike is a good idea KH
Reply With Quote
  #4  
Old 17 Mar 2015, 15:59
amreboot amreboot is offline
 
Join Date: Jul 2013
kh99,

Thanks! That worked.
Reply With Quote
  #5  
Old 27 Mar 2015, 21:11
Bill Thebert Bill Thebert is offline
 
Join Date: Mar 2002
Is there a hack/mod that changes vBulletin 4.2.X to use the undisplayed email address (rather than the publicly displayed user handle) for login purposes?

Been looking but haven't found one yet.
Reply With Quote
  #6  
Old 27 Mar 2015, 21:16
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
There is one that allows users to log in with their email address, but it doesn't stop the username from being used. I remember looking at it briefly and thinking that there wasn't an easy way to disable login by username, but maybe I'll have another look.
Reply With Quote
  #7  
Old 27 Mar 2015, 21:22
Bill Thebert Bill Thebert is offline
 
Join Date: Mar 2002
Originally Posted by kh99 View Post
There is one that allows users to log in with their email address, but it doesn't stop the username from being used. I remember looking at it briefly and thinking that there wasn't an easy way to disable login by username, but maybe I'll have another look.
Yeah . . . I found one that allowed login via EITHER the email OR the handle.

And you're right, I want to DISABLE logging in by username and instead allow login ONLY by the hidden email address.
Reply With Quote
  #8  
Old 27 Mar 2015, 21:43
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Oh, I almost forgot about this thread: http://www.vbulletin.org/forum/showt...me#post2540362

I did think of a way to do it (without that other mod) by making a file change. It does have that one problem I mentioned though.
Reply With Quote
  #9  
Old 27 Mar 2015, 22:49
Bill Thebert Bill Thebert is offline
 
Join Date: Mar 2002
Originally Posted by kh99 View Post
Oh, I almost forgot about this thread: http://www.vbulletin.org/forum/showt...me#post2540362

I did think of a way to do it (without that other mod) by making a file change. It does have that one problem I mentioned though.
Thanks. I think I'll give this a try.

But before I do, I'll have to give everyone a heads up.
Reply With Quote
  #10  
Old 27 Mar 2015, 23:12
TheLastSuperman's Avatar
TheLastSuperman TheLastSuperman is offline
 
Join Date: Sep 2008
Real name: Michael Miller Jr
This mod should work for the same purpose too - http://www.vbulletin.org/forum/showthread.php?t=264192

There is also a post on here by former vb.org coordinator Marco where he shows you how to edit the file and change to email only login which is similar to what kh99 did in the post he linked you to above so use his example asd its more current .
__________________
Daddy Does Dios and Figs!
https://www.linkedin.com/in/thelastsuperman

Search - Use the search feature to find similar issues/answers.
Information - Include screenshots, copy/pasted error codes, url etc.
Fixed - Please return to your thread/post and let us know how it was fixed!
Thanks - For participating! Click the "Like" on a post if someone helped you!
Reply With Quote
  #11  
Old 27 Mar 2015, 23:35
kh99 kh99 is offline
 
Join Date: Aug 2009
Real name: Kevin
Originally Posted by TheLastSuperman View Post
This mod should work for the same purpose too - http://www.vbulletin.org/forum/showthread.php?t=264192

There is also a post on here by former vb.org coordinator Marco where he shows you how to edit the file and change to email only login which is similar to what kh99 did in the post he linked you to above so use his example asd its more current .
Well, if we can find that it might have more complete instructions.

Edit: I found this: http://www.vbulletin.org/forum/showthread.php?t=96832 but once again it's logging in by username or email, and anyway it's editing the same section of code as I was suggesting.

Last edited by kh99; 28 Mar 2015 at 13:55.
Reply With Quote
Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 12:25.

Layout Options | Width: Wide Color: