[Beta 1.5.2] Enhanced Security 1.2

[[Unknown]]

The main point of this mod is that it requires an administrator password for any administrative activity, and turns off the secret question and answer for specified membergroups.

You can also turn on the uber-Paranoia mode, which: (for the specified groups..)
- diables the always login feature.
- only allows logins to last a specified length, for one browser session.
- checks session IDs and browser signatures.

This pretty much makes sure (imho) a script kiddie can't use an administrators cookie for anything marginally useful.  But, you should be able to use it in "non-Paranoia" mode just fine.

It's not perfect, though, so I'd appreciate any suggestions/comments.

Someone has been taking mods written by people and redistributing them in another forum package without any credit or permission.  To make myself absolutely clear:  YOU MAY NOT DO THAT WITH THIS MOD.  Further, you may not do ANYTHING but use this mod in a YaBB SE or PfaBB installation.  You may not even download or use this if your intent is to reverse engineer or otherwise facilitate the reproduction of this intellectual property in or for another forum software.

This modification is distributed under a proprietary license.  THIS IS NOT OPEN SOURCE, but freeware.  You may only use this on YaBB SE 1.5.1 or above and PfaBB boards.  If you want to use it on another board/system (ie. phpBB, ttForum, ttCMS, YaBB SE versions older than 1.5.1, etc.) or make any modifications for ANY REASON, you MUST CONTACT ME before doing so AND receive my EXPRESS consent.  Violation of this license constitutes ILLEGAL activity.

By downloading and applying this modification, you are agreeing to this license.  If you currently live or reside in a country or state that does not allow any of the terms of the license, you may not download the modification or apply it.

DO NOT redistribute under ANY circumstances without my EXPRESS consent.

The terms of this license may change WITHOUT NOTICE.

Please understand that this means that this mod WILL NEVER be included in the standard distribution of ANY GPL licensed product OR YaBB SE.

If you do not agree or cannot agree to these terms, DO NOT click on this link OR download the package by ANY means.
http://gbaetc.homeip.net/yypack/enhancedsecurity.zip

Thank you,
-[Unknown]

[Tilton53]

Geat Mod I love it just had one problem but fixed it was. The help file!

Change:

Code Select Expand

$helptxt['m_security'] = '
   Allows you to incease authentication and login security for specific membergroups.  This means turning off the secret question/answer and requiring an administrator\'s password for any administration.  (every hour only.)<br />
   Be warned, it disables the \'auto-login\' feature if you turn on the Paranoid-Level Security.  (with good reason.)<br />
   <br />
   NOTE:  If you are getting logged out a lot, try increasing your session length in php.ini.';

to

Code Select Expand

$helptxt['m_security'] = "
   Allows you to incease authentication and login security for specific membergroups.  This means turning off the secret question/answer and requiring an administrator's password for any administration.  (every hour only.)<br />
   Be warned, it disables the 'auto-login' feature if you turn on the Paranoid-Level Security.  (with good reason.)<br />
   <br />
   NOTE:  If you are getting logged out a lot, try increasing your session length in php.ini.";

It had to have double qoutes because of the periods!

[Tilton53]

Willl someone fix the qoute tags in that post!


I can't!

[[Unknown]]

I don't see any reason why you might need double quotes, but... I'm glad you got it working.

It works fine for me.....

-[Unknown]

[Tilton53]

It was they way the the php worked.

I have no clue why I needed it ethier but I changed it and it it worked fine.

I gessus I code have just escaped the periods and it might have worked.

[mysterious]

I tried installing this mod, but I seem to be getting an error that isn't addressed here: enhancedsecurity.php keeps telling me that undefined function template_header() is being called from line 54 in Errors.php. The template_header() function is in Subs.php, so I tried adding the line "include($sourcedir . '/Subs.php');" to enhancedsecurity.php before the include for Errors.php, but that didn't make a difference.

Any ideas as to what my problem might be would be greatlty appreciated.

[[Unknown]]

Try the YaBBpak.  Your problem is that you aren't logged in as an administrator....

-[Unknown]

[mysterious]

Try the YaBBpak.  Your problem is that you aren't logged in as an administrator....

OK -  I'll try that...

[mysterious]

Try the YaBBpak.  Your problem is that you aren't logged in as an administrator....

OK -  I'll try that...

Using YaBBpak worked beautifully.

Well, that is once I set the group and others write permissions of my yabbse directory and renamed LogInOut.php to LoginOut.php. (So, I'd say we're even on that one. )

Thanks!

[[Unknown]]

*makes note to change the filename...*

-[Unknown]

[FaSan]

On my Mod's Section, i change the status of enhsecurity but when i save this is not register this.

When i going to the mod's section i see the status on off.


Help Me !


Excuse my little..little english  

[[Unknown]]

Make sure you installed the mod properly and completely.

-[Unknown]

[FaSan]

Hi !

I'm sure... i've re-check all and it's ok...

Help Me !!