SMALL security mod

[mentaljason]

Okay, so this i in case of the event that rouge staff or a hacker every changes the status of he admin off the staff his little thing will check that if user id 1 isnt an admin it wil change them to an admin automatically with a little message.

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

simply put this under the gang part in your mainmenu.php

small but effective. ratings and updates are happily welcomed, constructive criticism only please! we all have manners.

[ShizzleNizzle]

Re: SMALL security mod

Nice this will come in handy for many people :)

Simple yet effective!, just like you said.

[mentaljason]

Re: SMALL security mod

Thankyou for the positive feedback!

[shrek1609]

Re: SMALL security mod

nice idea but maybe a better idea would be to have an array with all the staff admins userid's in and a check to see if that user is in that array if not they are fedded...

so any hacker who gains themselves admin status is auto fedded ;)

[shedh]

Re: SMALL security mod

what if the admin or any other staff account gets compromised?

[shrek1609]

Re: SMALL security mod

 

what if the admin or any other staff account gets compromised?

hmm i guess then the only way to secure against that would be to do an ip check for all staff, however that would be a problem with dynamic ip's

[mentaljason]

Re: SMALL security mod

:/ well i didnt consider that, but if staff being fedded is the problem then..

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

CHANGE XXXX for the fed day feild name

[ishmell]

Re: SMALL security mod

There is another simple, better way. Basically you take the userid of your staff and say in code if the userid does not equal yours and they are staff then it auto feds them. Keeps hackers from making themselves staff.

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

This can however be bypassed if the hacker changes there userid so you make another field to the users table. Name it whatever you want and put a special value in it by your user data along with your staffs user data. Then in code have it check if a users id is 1 or the other staff members id and if they dont have that special value in that new field you added then it auto deletes them.

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Normally, you would want to include all this is the header or mainmenu maybe.

[Cool]

Re: SMALL security mod

 

There is another simple, better way. Basically you take the userid of your staff and say in code if the userid does not equal yours and they are staff then it auto feds them. Keeps hackers from making themselves staff.

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

This can however be bypassed if the hacker changes there userid so you make another field to the users table. Name it whatever you want and put a special value in it by your user data along with your staffs user data. Then in code have it check if a users id is 1 or the other staff members id and if they dont have that special value in that new field you added then it auto deletes them.

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.

 

Normally, you would want to include all this is the header or mainmenu maybe.

which script do i put both of these in?

[Karlos]

Re: SMALL security mod

 

You're unable to view this code.

Viewing code within this forum requires registration, you can register here for free.