Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
3 registered (Jim, Sirdude, 1 invisible), 14 Guests and 20 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 11/04/08
Posts: 1
Top Posters (30 Days)
Ruben Rocha 187
Gizmo 107
Rick 100
Thelockman 83
driv 41
AllenAyres 35
Sirdude 29
ntdoc 28
Ian 24
ScriptKeeper 18
Latest Photos
My Home System
test photo gallery
Bernese Mountain Dogs
My Daimler
Dorado and shark
Topic Options
Rate This Topic
#215987 - 07/29/08 12:17 PM Forensics options under UBB Classic 6.3.1.1
forteanajones Offline
stranger

Registered: 07/22/08
Posts: 6
I have a board that was once running on UBB Classic 6.3.1.1 but has since been upgraded to something much better and newer. I only keep a copy of the old one around for posterity.

One of my users is asking for access to the admin console for that old instance, as well as the files. He wants to know who logged into a certain user account several years back and sent a private message on behalf of another forum member who was actually deceased at the time. I have told him that the information he is looking for does not exist, but he doesn't seem to believe me.

The user in question thinks he can submit queries or browse log files in particular, but it is my understanding that UBB Classic 6.3.1.1 does not actually keep a running log of events of this nature at all, anywhere, and that there is zero chance that the info he is after exists in any form. I know this from correspondence with Infopop support as well as from poking around in the files and on the console myself.

The only theoretical option I can think of, which itself would have also been a real stretch, would have been to correlate the private message sent/received timestamps with IP addresses logged on the web server (apache2). But of course the events in question took place so long ago that the server logs for that time period no longer exist (this is confirmed with the host).

So in short, I think this person is completely out of luck, but I wanted to triple check here just in case I have missed an option somewhere.

Top
#215988 - 07/29/08 01:11 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: forteanajones]
driv Offline
Pooh-Bah
****

Registered: 01/10/04
Posts: 1703
Loc: Essex, UK
I believe this is a complete no-hoper.

If someone logged in as this user they would (to all intents and purposes) 'be' this user. Without server logs, there is no way to tell where the login came from.

And as you mention this was several years ago - there is a very real chance the user was using a dial-up connection and almost certainly didn't have a static IP.
_________________________
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)
My True star rating wink

Top
#215989 - 07/29/08 01:31 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: driv]
forteanajones Offline
stranger

Registered: 07/22/08
Posts: 6
Thanks, driv.

Just to re-confirm what I have seen and what I've been told, what exactly is happening "under the hood" when a person logs in and sends a private message under UBB Classic 6.3.1.1?

My understanding is the login event is recorded only in the "last-logged-in" profile field and that the message itself is saved to a flat file with no extraneous info recorded anywhere. It would be helpful if you could help me re-confirm this understanding.

Top
#215991 - 07/29/08 03:03 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: forteanajones]
driv Offline
Pooh-Bah
****

Registered: 01/10/04
Posts: 1703
Loc: Essex, UK
Originally Posted By: forteanajones
Just to re-confirm what I have seen and what I've been told, what exactly is happening "under the hood" when a person logs in and sends a private message under UBB Classic 6.3.1.1?


Well, that's really a question for one of the developers.

But as far as this goes... "no extraneous info recorded anywhere"

I can't imagine why it would be. Data files are data files and server logs are server logs.
_________________________
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)
My True star rating wink

Top
#215998 - 07/29/08 07:53 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: driv]
AllenAyres Moderator Offline

****

Registered: 12/29/03
Posts: 1639
Loc: Texas
IP addresses were recorded for pm's, but I'm not sure if they went all the way back to 6.3.x - you can look at the pm file itself and see.
_________________________
- Allen
- ThreadsDev | PraiseCafe

Top
#216000 - 07/29/08 08:43 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: AllenAyres]
Gizmo Moderator Offline

***

Registered: 06/04/06
Posts: 12008
Loc: Portland, OR; USA
Not to mention, I highly doubt that (even if the static ip still belongs to that isp) the IP will give you any valid or valuable information in such a long period of time...
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#216077 - 07/31/08 01:20 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: AllenAyres]
forteanajones Offline
stranger

Registered: 07/22/08
Posts: 6
Originally Posted By: AllenAyres
IP addresses were recorded for pm's, but I'm not sure if they went all the way back to 6.3.x - you can look at the pm file itself and see.
Great info, Allen. Are you referring to a file such as http://www.examplesite.com/cgi-bin/Members/pm_topics/U/00000123.cgi? This appears to be the PM thread in its entirety but lacks IP-related information. Anywhere else I might look, or does this confirm that UBB Classic 6.3.1.1 wasn't storing IPs anywhere yet?

Top
#216078 - 07/31/08 01:36 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: forteanajones]
Thelockman Offline
addict
**

Registered: 02/10/07
Posts: 443
Loc: Pennsylvania
The only place that the IP addresses were stored is with the message board post's in that UBB version.

The Private Messages did not store IP addresses at all in Classic.
_________________________
Beagle World - A forum for those who are owned by beagles.
Track Thunder - The Unofficial Racing Forum

Top
#216215 - 08/04/08 11:33 AM Re: Forensics options under UBB Classic 6.3.1.1 [Re: Thelockman]
AllenAyres Moderator Offline

****

Registered: 12/29/03
Posts: 1639
Loc: Texas
6.3.1.1 has been a while back... that's nearly the "Earthquake Edition" wink
_________________________
- Allen
- ThreadsDev | PraiseCafe

Top


Moderator:  AllenAyres, Gizmo, Ian, Ron M 
Shout Box

Today's Birthdays
kimteague_5@msn.com, Trekkie, Trixie
Recent Topics
Issue mass-emailing
by Mitch P.
Today at 12:55 PM
Inclusion of Locked/Closed thread capabilities
by QSS Tim
Today at 11:17 AM
Contact Page Problem
by David DelMonte
Today at 09:05 AM
FAQ bug,
by BreeOge
Today at 08:36 AM
I'm the Admin but.....
by David DelMonte
Yesterday at 11:12 AM
Forum Stats
4261 Members
33 Forums
30539 Topics
155016 Posts

Max Online: 978 @ 06/24/07 08:19 PM