Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Second Level Login by liamwli Details »
Second Level Login by liamwli
Mod Version: 1.1.0, by liamwli (Coder) liamwli is offline
Developer Last Online: Dec 2019 I like it Show Printable Version Email this Page

vB Version: 4.1.0 Rating: (1 vote - 5.00 average) Installs: 9
Released: 21 Oct 2012 Last Update: 24 Oct 2012 Downloads: 70
Not Supported DB Changes Uses Plugins Template Edits Auto-Template Additional Files  

THIS MOD IS FOR VBULLETIN 4.1.0+

This modification provides a feature for users of your forum to request a code via email on login, which is then needed to complete the login process.

This mod is similar to the Infinity: Dual Authentication LITE modification.

This mod differs in a few aspects however:
  1. You have the ability to force usergroups to use this mod
  2. This mod only has the second code option
  3. This mod doesn't stop people accessing the usercp if you don't want them to use this mod

Like I said, you have the ability to force usergroups to use this mod. If a user is in a usergroup you have forced, then they will get an error when they view the forumhome if they have't enabled this mod on their account.

As well as that, there is an option for Admin's to specify their own custom code algorithm. This will allow Admin's to choose how the random second code is generated, if they so wish.

Screenshots below. Please mark as installed for more support.

Changelog:
1.1.0
Added hooks to allow further development
Removed unused plugin

1.0.1
Fixed mutiple SQL Injection vulnerabilities.

1.0
Initial Release

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	1.jpg
Views:	371
Size:	40.3 KB
ID:	141902   Click image for larger version

Name:	2.PNG
Views:	305
Size:	2.9 KB
ID:	141903   Click image for larger version

Name:	3.jpg
Views:	283
Size:	78.8 KB
ID:	141904   Click image for larger version

Name:	4.jpg
Views:	349
Size:	16.3 KB
ID:	141905  

Click image for larger version

Name:	5.png
Views:	245
Size:	4.2 KB
ID:	141906  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
  #16  
Old 22 Oct 2012, 03:46
MegaManSec MegaManSec is offline
 
Join Date: Aug 2011
it has an sql injection in it. (probably more than just one)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.

__________________
I do free vBulletin modification security checks. PM me.
http://services.internot.info/
Reply With Quote
  #17  
Old 22 Oct 2012, 11:55
liamwli liamwli is offline
 
Join Date: May 2012
Originally Posted by MegaManSec View Post
it has an sql injection in it. (probably more than just one)


Block Disabled:      (Update License Status)  
Suspended or Unlicensed Members Cannot View Code.
No, it doesn't. That code is only run if the username and password are correct.

Check the if statement at the top.

For this to work, someone would have to have a username that contained the SQLi.
Reply With Quote
  #18  
Old 23 Oct 2012, 01:39
MegaManSec MegaManSec is offline
 
Join Date: Aug 2011
Originally Posted by liamwli View Post
No, it doesn't. That code is only run if the username and password are correct.

Check the if statement at the top.

For this to work, someone would have to have a username that contained the SQLi.
????

go directly to liam_sll.php
if (($_POST['do'] == 'login') && ($vbulletin->options['liam_dualauth_onoff']))

set post 'do' to login
__________________
I do free vBulletin modification security checks. PM me.
http://services.internot.info/
Reply With Quote
  #19  
Old 24 Oct 2012, 17:54
BirdOPrey5's Avatar
BirdOPrey5 BirdOPrey5 is offline
 
Join Date: Jun 2008
Real name: Joe D.
Mod restored from Quarantine.
__________________
-Joe
Former vb.org Moderator. Retired.

@BirdOPrey5 | All Things BOP5 | Joe's Ultimate Off Topic
Note - I no longer making new VB mods, sorry.
Reply With Quote
  #20  
Old 26 Oct 2012, 17:48
Skyrider Skyrider is offline
 
Join Date: Feb 2006
Awesome mod, but for now I've disabled it. For some odd reasons after too many code submissions and testing the plugin, I was unable to log in on my own account saying I've entered an incorrect username/password. by disabling the mod, everything ran fine again and I was able to login normally.
Reply With Quote
  #21  
Old 27 Oct 2012, 16:53
liamwli liamwli is offline
 
Join Date: May 2012
Originally Posted by FF|Skyrider View Post
Awesome mod, but for now I've disabled it. For some odd reasons after too many code submissions and testing the plugin, I was unable to log in on my own account saying I've entered an incorrect username/password. by disabling the mod, everything ran fine again and I was able to login normally.
I noticed that, but I don't know why or when it occurs....
Reply With Quote
  #22  
Old 11 Nov 2012, 17:48
Prorockz Prorockz is offline
 
Join Date: Nov 2009
anything for vBulletin 3.8x?????
Reply With Quote
  #23  
Old 11 Nov 2012, 17:55
liamwli liamwli is offline
 
Join Date: May 2012
Originally Posted by Prorockz View Post
anything for vBulletin 3.8x?????
No, sorry.
Reply With Quote
  #24  
Old 17 Nov 2012, 20:35
Alibass's Avatar
Alibass Alibass is offline
 
Join Date: Mar 2007
Originally Posted by FF|Skyrider View Post
Awesome mod, but for now I've disabled it. For some odd reasons after too many code submissions and testing the plugin, I was unable to log in on my own account saying I've entered an incorrect username/password. by disabling the mod, everything ran fine again and I was able to login normally.
Originally Posted by liamwli View Post
I noticed that, but I don't know why or when it occurs....
Has this issue been fixed and if so when is next release?
__________________
Alibass
Reply With Quote
  #25  
Old 10 Mar 2013, 15:14
Nirjonadda Nirjonadda is offline
 
Join Date: Dec 2011
Real name: Md Tajirul Islam
Please have any update for work on 4.2.0?
Reply With Quote
  #26  
Old 28 Jan 2015, 01:14
YOODA230 YOODA230 is offline
 
Join Date: Jun 2011
Up Up Up one of the best mod make your site secure
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 05:01.

Layout Options | Width: Wide Color: