Simple Machines Community Forum

SMF Support => SMF 1.1.x Support => Topic started by: Owdy on January 11, 2004, 08:04:50 PM

Title: Administration login attempt!
Post by: Owdy on January 11, 2004, 08:04:50 PM
QuoteAdministration login attempt!
Referer: http://www.hoitajat.net/foorumi/index.php?action=profile2
User agent: Mozilla/4.0 (compatible; MSIE 5.0; Windows NT; DigExt)
IP: 137.163.145.226

Do i need to worry? Is someone trying to hack my board?
Title: Re: Administration login attempt!
Post by: [Unknown] on January 11, 2004, 08:06:00 PM
It might have been you.  That gets logged when someone clicks admin, and is logged in as an administrator, but fails to correctly type their password.

-[Unknown]
Title: Re: Administration login attempt!
Post by: Owdy on January 11, 2004, 08:07:12 PM
I see that ip is one of my members... Hmmm
Title: Re: Administration login attempt!
Post by: dschwab9 on January 12, 2004, 03:59:46 PM
I get that a lot too - and not from my IP address.

Is there anything a member could click on that would give that error?
Title: Re: Administration login attempt!
Post by: [Unknown] on January 12, 2004, 05:09:43 PM
They can only cause that error if they are logged in as an administrator.  It should tell you who it is.

-[Unknown]
Title: Re: Administration login attempt!
Post by: dschwab9 on January 12, 2004, 05:11:05 PM
It shows as just a regular user on mine.  And the user is shows is not an admin.
Title: Re: Administration login attempt!
Post by: Owdy on January 12, 2004, 05:11:46 PM
So one of my members has admin rights? Because im only admin and that IP wasnt mine.
Title: Re: Administration login attempt!
Post by: [Unknown] on January 12, 2004, 05:16:29 PM
Well, *checks to make sure no one changed it...*

First we check if they are an administrator.  If not, the "you are not allowed..." error is shown, and logged.

Hmm... but someone is using it for profiles as well :P.  Okay, so it might show this error if someone who has the permission to edit profiles other than their own does something fishy.

Odd.... someone messed with my function and I didn't even notice.

-[Unknown]
Title: Re: Administration login attempt!
Post by: Owdy on January 12, 2004, 05:21:45 PM
Quote from: [Unknown] on January 12, 2004, 05:16:29 PM
who has the permission to edit profiles other than their own does something fishy.


No one has this permission....
Title: Re: Administration login attempt!
Post by: dschwab9 on January 12, 2004, 05:21:54 PM
I believe it's action=profile2 that I'm getting those on, but I deleted them, so I can't look at it  :P  But I don't any users that can edit other users profile  ::)  ???
Title: Re: Administration login attempt!
Post by: [Unknown] on January 12, 2004, 05:22:52 PM
Hmm, well, I didn't do most of the Profile code so as long as it's the profile you're probably okay.

-[Unknown]
Title: Re: Administration login attempt!
Post by: Owdy on January 12, 2004, 05:24:54 PM
Quote from: dschwab9 on January 12, 2004, 05:21:54 PM
I believe it's action=profile2 that I'm getting those on,

Me too

QuoteAdministration login attempt!
Referer: http://www.hoitajat.net/foorumi/index.php?action=profile2