+- Sinisterly (https://sinister.ly)
+-- Forum: Design (https://sinister.ly/Forum-Design)
+--- Forum: Web Design (https://sinister.ly/Forum-Web-Design)
+--- Thread: Gold Admin panel security pin! (/Thread-Gold-Admin-panel-security-pin)
Pages:
1
2
Admin panel security pin! - Nefarious - 12-22-2013
This is basically a second password, it's helpful against hackers.
First you want to open /admin/inc/class_page.php
Search for the following code.(CTRL+F)
PHP Code:
<div class="label"{$login_label_width}><label for="password">{$lang->password}</label></div>
<div class="field"><input type="password" name="password" id="password" class="text_input" /></div>
Now you want to replace it with the following:
PHP Code:
<div class="label"{$login_label_width}><label for="password">{$lang->password}</label></div>
<div class="field"><input type="password" name="password" id="password" class="text_input" /></div>
<div class="label"{$login_label_width}><label for="pin">Secret PIN</label></div>
<div class="field"><input type="password" name="pin" id="pin" class="text_input" /></div>
Now open ./admin/index.php
And you want to look for this code:
PHP Code:
if($user['uid'])
{
$query = $db->simple_select("users", "*", "uid='".$user['uid']."'");
$mybb->user = $db->fetch_array($query);
}
Replace that with the following:
PHP Code:
if($user['uid'])
{
$query = $db->simple_select("users", "*", "uid='".$user['uid']."'");
$mybb->user = $db->fetch_array($query);
}
if (isset($config['acp_pin']) && $mybb->input['pin'] != $config['acp_pin']) {
$default_page->show_login("Invalid PIN","error");
}
Now in /inc/config.php place the following code somewhere.
PHP Code:
$config['acp_pin'] = 'KiiR1T0123';
The pin number can bet letters, numbers, or symbols.
Write the pin on paper do not keep it on your computer.
RE: Admin panel security pin! - Feat - 12-22-2013
If only Wonders had this when you were mocking him, Mr. Cox.
RE: Admin panel security pin! - Nefarious - 12-22-2013
(12-22-2013, 02:01 AM)ABC Wrote: If only Wonders had this when you were mocking him, Mr. Cox.
That wasn't me.
I defaced it once, after that it was someone else that had my shell.
RE: Admin panel security pin! - BreShiE - 12-22-2013
Your shell? Nigger please...
RE: Admin panel security pin! - Nefarious - 12-22-2013
(12-22-2013, 07:27 AM)BreShiE Wrote: Your shell? Nigger please...
Anar got the admin password, me and charon figured out how to shell it. :p
(Love you brushy)
RE: Admin panel security pin! - Lone Wanderer_HF - 12-22-2013
What is this. Trey. You know how BBcode works :o. Next thing you'll tell me something crazy like groups can have more than one leader
.
RE: Admin panel security pin! - Nefarious - 12-22-2013
(12-22-2013, 02:16 PM)Aragorn II Elessar Wrote: What is this. Trey. You know how BBcode works :o. Next thing you'll tell me something crazy like groups can have more than one leader
Lol.
What is this black magic you speak of?
RE: Admin panel security pin! - BreShiE - 12-22-2013
Quote:Anar got the admin password, me and charon figured out how to shell it. :p
(Love you brushy)
Yes, but it's not your shell. :3
RE: Admin panel security pin! - Nefarious - 12-22-2013
(12-22-2013, 02:23 PM)BreShiE Wrote: Yes, but it's not your shell. :3
I suppose you're right, I don't own the rights to WSO. T_T
RE: Admin panel security pin! - Hypothermia - 12-22-2013
This won't stop anybody with a shell though, and half the time I could still find a way in with just the admin pass. Just a warning.
Also, I recommend md5'ing that pass, it might not do much, but it might waste a hackers time trying to figure out one more of your passwords.