Site Links
Home
Features
Documentation
Pricing & Order
Members Area
Support Options
Who's Online
4 registered (ECNet, Gizmo, Satsjaak, 1 invisible), 23 Guests and 24 Spiders online.
Key: Admin, Global Mod, Mod
Featured Member
Registered: 06/05/06
Posts: 1097
Top Posters (30 Days)
Ruben Rocha 103
Rick 80
Mark S 71
Thelockman 58
Gizmo 54
driv 35
ntdoc 32
Sirdude 32
packlite 24
AllenAyres 22
Latest Photos
bear test
Beach Barbie-Q
Sunset
Accept the challenge!
Trees
Topic Options
Rate This Topic
#215987 - 07/29/08 12:17 PM Forensics options under UBB Classic 6.3.1.1
forteanajones Offline
stranger

Registered: 07/22/08
Posts: 6
I have a board that was once running on UBB Classic 6.3.1.1 but has since been upgraded to something much better and newer. I only keep a copy of the old one around for posterity.

One of my users is asking for access to the admin console for that old instance, as well as the files. He wants to know who logged into a certain user account several years back and sent a private message on behalf of another forum member who was actually deceased at the time. I have told him that the information he is looking for does not exist, but he doesn't seem to believe me.

The user in question thinks he can submit queries or browse log files in particular, but it is my understanding that UBB Classic 6.3.1.1 does not actually keep a running log of events of this nature at all, anywhere, and that there is zero chance that the info he is after exists in any form. I know this from correspondence with Infopop support as well as from poking around in the files and on the console myself.

The only theoretical option I can think of, which itself would have also been a real stretch, would have been to correlate the private message sent/received timestamps with IP addresses logged on the web server (apache2). But of course the events in question took place so long ago that the server logs for that time period no longer exist (this is confirmed with the host).

So in short, I think this person is completely out of luck, but I wanted to triple check here just in case I have missed an option somewhere.

Top
#215988 - 07/29/08 01:11 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: forteanajones]
driv Offline
Pooh-Bah
****

Registered: 01/10/04
Posts: 1747
Loc: Essex, UK
I believe this is a complete no-hoper.

If someone logged in as this user they would (to all intents and purposes) 'be' this user. Without server logs, there is no way to tell where the login came from.

And as you mention this was several years ago - there is a very real chance the user was using a dial-up connection and almost certainly didn't have a static IP.
_________________________
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)
My True star rating wink

Top
#215989 - 07/29/08 01:31 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: driv]
forteanajones Offline
stranger

Registered: 07/22/08
Posts: 6
Thanks, driv.

Just to re-confirm what I have seen and what I've been told, what exactly is happening "under the hood" when a person logs in and sends a private message under UBB Classic 6.3.1.1?

My understanding is the login event is recorded only in the "last-logged-in" profile field and that the message itself is saved to a flat file with no extraneous info recorded anywhere. It would be helpful if you could help me re-confirm this understanding.

Top
#215991 - 07/29/08 03:03 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: forteanajones]
driv Offline
Pooh-Bah
****

Registered: 01/10/04
Posts: 1747
Loc: Essex, UK
Originally Posted By: forteanajones
Just to re-confirm what I have seen and what I've been told, what exactly is happening "under the hood" when a person logs in and sends a private message under UBB Classic 6.3.1.1?


Well, that's really a question for one of the developers.

But as far as this goes... "no extraneous info recorded anywhere"

I can't imagine why it would be. Data files are data files and server logs are server logs.
_________________________
Oi Oi Saveloy!
(Courtesy of Sd - well known Anglophile...!?!)
My True star rating wink

Top
#215998 - 07/29/08 07:53 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: driv]
AllenAyres Moderator Offline

****

Registered: 12/29/03
Posts: 1667
Loc: Texas
IP addresses were recorded for pm's, but I'm not sure if they went all the way back to 6.3.x - you can look at the pm file itself and see.
_________________________
- Allen
- ThreadsDev | PraiseCafe

Top
#216000 - 07/29/08 08:43 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: AllenAyres]
Gizmo Moderator Online   sleepy

***

Registered: 06/04/06
Posts: 12089
Loc: Portland, OR; USA
Not to mention, I highly doubt that (even if the static ip still belongs to that isp) the IP will give you any valid or valuable information in such a long period of time...
_________________________
UGN Security, Elite Web Gamers & VNC Web Design Owner
Longtime UBB Supporter, UBB7 Beta Tester & Resident Post-A-Holic

Top
#216077 - 07/31/08 01:20 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: AllenAyres]
forteanajones Offline
stranger

Registered: 07/22/08
Posts: 6
Originally Posted By: AllenAyres
IP addresses were recorded for pm's, but I'm not sure if they went all the way back to 6.3.x - you can look at the pm file itself and see.
Great info, Allen. Are you referring to a file such as http://www.examplesite.com/cgi-bin/Members/pm_topics/U/00000123.cgi? This appears to be the PM thread in its entirety but lacks IP-related information. Anywhere else I might look, or does this confirm that UBB Classic 6.3.1.1 wasn't storing IPs anywhere yet?

Top
#216078 - 07/31/08 01:36 PM Re: Forensics options under UBB Classic 6.3.1.1 [Re: forteanajones]
Thelockman Offline
addict
***

Registered: 02/10/07
Posts: 522
Loc: Pennsylvania
The only place that the IP addresses were stored is with the message board post's in that UBB version.

The Private Messages did not store IP addresses at all in Classic.
_________________________
Beagle World - A forum for those who are owned by beagles.
Track Thunder - The Unofficial Racing Forum

Top
#216215 - 08/04/08 11:33 AM Re: Forensics options under UBB Classic 6.3.1.1 [Re: Thelockman]
AllenAyres Moderator Offline

****

Registered: 12/29/03
Posts: 1667
Loc: Texas
6.3.1.1 has been a while back... that's nearly the "Earthquake Edition" wink
_________________________
- Allen
- ThreadsDev | PraiseCafe

Top


Moderator:  AllenAyres, Gizmo, Ian, Ron M 
Shout Box

Today's Birthdays
Anoneguy
Recent Topics
Chaging the "max online" number and date
by wanted
Today at 02:22 PM
7.4.1. In Threaded Mode - "Mark All Read" Doesn't Work
by packlite
Today at 10:26 AM
Custom island with sql connection
by Robje01
Today at 09:13 AM
Arabic letters test
by Cowabanga
Today at 04:47 AM
Error Message
by Boyzone-Online
Yesterday at 03:14 PM
Forum Stats
4296 Members
33 Forums
30685 Topics
155996 Posts

Max Online: 978 @ 06/24/07 08:19 PM