1
luckylin
Admin - Who is Online - IP Trace hack
  • 2004/9/30 16:29

  • luckylin

  • Just popping in

  • Posts: 35

  • Since: 2004/3/5 2


I made this simple and direct hack on Who Is Online to trace users, not only for anonymous but all. I noticed there is a hack "Spy on anonymous users " but since the concept is a bit different, I made a new topic.

This idea is to add IP Traceing function so you can trace back on every visitor, for Admin only. I currently made 3 NIC areas for tracking but you can add more if you want. The three are ARIN, APNIC and RIPE.


1. search this line in misc.php, if I am right it's line #210.
echo '<br />('.$onlineUsers[$i]['ip'].')';



2. replace with -
echo '<br />IP: '.$onlineUsers[$i]['ip'].' <br />
<a href=http://ws.arin.net/cgi-bin/whois.pl?queryinput='
.$onlineUsers[$i]['ip'].' target=ip1 />ARIN</a> 
&nbsp; <a href=http://www.apnic.net/apnic-bin/whois.pl?searchtext='
.$onlineUsers[$i]['ip'].' target=ip2 />APNIC</a>
&nbsp; <a href=http://www.ripe.net/perl/whois/?form_type=simple&searchtext='
.$onlineUsers[$i]['ip'].' target=ip3 />RIPE</a>';




This is simple hack you don't need to create new folder or files. You can trace the user to his/her ISP almost directly.

2
tl
Re: Admin - Who is Online - IP Trace hack
  • 2004/10/1 13:16

  • tl

  • Friend of XOOPS

  • Posts: 999

  • Since: 2002/6/23


luckylin, thanks for a great TIP. I have added it to the collection of Xoops-Tips.com.

To make it complete, I also added LACNIC lookup. Anyone who is interested in luckylin's hack can download the hacked version of misc.php from xoops-tips.

3
luckylin
Re: Admin - Who is Online - IP Trace hack
  • 2004/10/4 17:10

  • luckylin

  • Just popping in

  • Posts: 35

  • Since: 2004/3/5 2


Quote:

tl wrote:
luckylin, thanks for a great TIP. I have added it to the collection of Xoops-Tips.com.

To make it complete, I also added LACNIC lookup. Anyone who is interested in luckylin's hack can download the hacked version of misc.php from xoops-tips.


You are welcome tl; I've visited your site, nice works there!

I made an additional RDNS function on the WhoIs Online too.

look at the line (#194)
$onlineUsers[$i]['ip'] = $onlines[$i]['online_ip'];


and ADD the line just below it.

$onlineUsers[$i]['dns'] =gethostbyaddr($onlines[$i]['online_ip']);



Then, jump to the line #211 (Original #210)
modify the code at the beginning from -

echo '<br />IP: '.$onlineUsers[$i]['ip'].' <br />
PS: just the beginning on line #211 shown above.

to - (simple RDNS)

echo '<br />IP: '.$onlineUsers[$i]['ip'].' <br />RDNS: '.$onlineUsers[$i]['dns'].' <br />


OR (with link of RDNS)

echo '<br />IP: '.$onlineUsers[$i]['ip'].' <br />RDNS: <a href=http://'.$onlineUsers[$i]['dns'].' target=rdns>'.$onlineUsers[$i]['dns'].'</a> <br />


Please note since not all IPs can do RDNS, the RDNS link hack may not work properly.

keep the rest the same, and feel free to add tl's LACNIC to the end.

Now, you will have the IP, RDNS (if avalable, with link or not) and 4 nic areas lookup! (thanks to tl)

tl, feel free to make an updated download on your site!

4
tl
Re: Admin - Who is Online - IP Trace hack
  • 2004/10/4 17:45

  • tl

  • Friend of XOOPS

  • Posts: 999

  • Since: 2002/6/23


luckylin - Thanks. I have updated file, but made the DNS lookup non-clickable, as majority of the users will not be running a server on their IPs.

Anyone interested can download the updated version.

5
luckylin
Re: Admin - Who is Online - IP Trace hack
  • 2004/10/4 18:12

  • luckylin

  • Just popping in

  • Posts: 35

  • Since: 2004/3/5 2


Surely, I made them optional just in case anyone who need to back trace the server or easily locate their ISPs without clicks (this would be the case). Thanks for the update!

BTW, I am thinking if we could trim and mask the IPs (c and d class) so everyone can atually open Whois Online (not only the Admin, of course Admin see all IPs, no mask) and see masked IPs for references. Like "IP: 207.123.xxx.xxx" do you have ideas?

6
tl
Re: Admin - Who is Online - IP Trace hack
  • 2004/10/4 18:22

  • tl

  • Friend of XOOPS

  • Posts: 999

  • Since: 2002/6/23


Sorry, can't help on that, maybe someone else can help.

I am not sure though if that would be helpful. I always thought user look up was meant for the admin not for the users.

Login

Who's Online

160 user(s) are online (97 user(s) are browsing Support Forums)


Members: 0


Guests: 160


more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: Mar 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits