News:

Wondering if this will always be free?  See why free is better.

Main Menu

Detecting Multiple Accounts

Started by Mike Bobbitt, April 22, 2005, 11:22:50 PM

Previous topic - Next topic

Mike Bobbitt

I have a fairly regular issue with users creating multiple accounts, whether it's to slip past a ban, lost password, or simple confusion.

To try to detect these, I've put together a script which lists every IP address that has seen more than one account post from it. (Script attached)

It's not pretty, and you will need to customize it a bit, but it should do the trick. Please note that this page takes some serious processing to build, so you may want to run it infrequently.

Each IP address is clickable, taking you to the forum "track IP" page for that address. If an account still exists, it's name will be clickable as well, taking you to the user's profile.

Note that since this page is not protected, you should either remove it when not in use, or place it under a password protected web directory. (It could allow users to get address info for each other, if they know you're using it.)

Enjoy, and good hunting! :D

Edit: Slightly updated, to allow easier setup. (DB/table names have been turned into variables.)

Edit 2: Updated to work with 1.1.

Edit 3: Updated for SMF 2... I can't un-attach the 1.1 version, so here is a link to the SMF 2 script: http://army.ca/deleteme/multiple_accts_php.txt

azuregenesis

#1
i would like a step by step on how this is setup :)

thank you.

i'm getting these error messages:

Warning: Cannot modify header information - headers already sent

and

SELECT command denied to user

Mike Bobbitt

#2
You need to edit the script to ensure the path to your SSI.php needs to be correct:

require('/var/www/html/forums/SSI.php');

And just below that, change these settings if required (the defaults may work, as they are the SMF defaults):

// Database name
$accounts_db_name="smf";

// Database tables
$db_message_table="smf_messages";
$db_member_table="smf_members";


Once that's done just browse to multiple_accounts.php and it should display the info.

azuregenesis

ah. i see. forgot to edit the databse settings.. :)

thank you!

joker

I'm getting: Error writing file '/tmp/MYWwQGzY' (Errcode: 28)
Any hint?
joker ;-)

[Unknown]

Quote from: joker on May 24, 2005, 02:10:35 AM
I'm getting: Error writing file '/tmp/MYWwQGzY' (Errcode: 28)
Any hint?

Getting Errors From MySQL?

-[Unknown]

Mike Bobbitt

Sounds like you're on your way, but let me know if you need any assistance.


Cheers
Mike

joker

Thanks [Unknown] , but there is enough db/diskspace. That's why I asked here.
joker ;-)

[Unknown]

Joker, this means the /tmp partition is full.  Don't check your space, just tell your host.  This is not your fault, and you can't fix it.

-[Unknown]

joker

I run my own server, the /tmp IS empty and the error remains the same.  :-\
joker ;-)

[Unknown]

Then perhaps tmp_table_size is larger than the available space in the /tmp partition.  Check "df".

-[Unknown]

rojamaia

#11

i believe that this one is going to be useful.  however, i can't really understand how i would edit the database info as you have posted.   can you post an example?

mine is now like this:

// Database name
$accounts_db_name="smf";

// Database tables
$db_message_table="smf_messages";
$db_member_table="smf_members";

// Make sure table name includes database name
$db_message_table="`$accounts_db_name`.`$db_message_table`";
$db_member_table="`$accounts_db_name`.`$db_member_table`";

require('http://catbalogan.com/discussion/SSI.php');


my database name is "smf"
i'm not sure how to the rest, although i know that my member and messages tables are simply "smf_members" and "smf_messages"


Mike Bobbitt

I've re-jigged the script a bit so it's easier to configure. Sounds like all you should have to do is update the system path to SSI.php. It can't be a URL, it has to be a filesystem path, such as /var/www/html/forums/SSI.php or /home/malinaobenny/www/forums/SSI.php.


Cheers
Mike

rojamaia


i already configured it as:

/malinaobenny/discussion/SSI.php


then i ran the PHP, but all i got is a blank white page

Mike Bobbitt

That looks like it's not a complete path, check your Settings.php and use the value found in $boarddir as the directory. (Just append /SSI.php to that.)

rojamaia



i did, and it was only '/discussion' there, so i set it into '/discussion/SSI.php' but it didn't work either


require('discussion/SSI.php');

// Database name
$accounts_db_name="smf";

// Database tables
$db_message_table="smf_messages";
$db_member_table="smf_members";

// Make sure table name includes database name
$db_message_table="`$accounts_db_name`.`$db_message_table`";
$db_member_table="`$accounts_db_name`.`$db_member_table`";



Mike Bobbitt

You're missing a leading /:

require('/discussion/SSI.php');

If that's the right path, it should work. Anything in your web server error logs?

rojamaia


it now works, but this is what i got:

QuoteYou have an error in your SQL syntax near 'OR ID_BOARD = 0)
ORDER BY addDeny DESC, ID_BOARD' at line 5
File: /discussion/Sources/Load.php
Line: 435

Mike Bobbitt

Works ok for me on a couple of test boards... have you made any changes to Load.php? Any mods installed?

rojamaia

yes, i had some mods

this is the code in the vicinity of line 435:

$request = db_query("
SELECT permission, addDeny
FROM {$db_prefix}member_permissions
WHERE ID_MEMBER = $ID_MEMBER
AND (ID_BOARD = $board OR ID_BOARD = 0)
[color=red]ORDER BY addDeny DESC, ID_BOARD", __FILE__, __LINE__);[/color]
$remove = array();
while ($row = mysql_fetch_assoc($request))
{
if (empty($row['addDeny']))
$removals[] = $row['permission'];

Advertisement: