We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

Search info by IP | Forum

Patricia Zorrilla Bcn

I'm developing a plugin that among other things shows users with the same IP, to find members with several profiles.

See the image

I have included (above, on the table, the presentation is provisional) a line that allows you to search this IP on different websites. I have this, https://www.ip-tracker.org/...hp?ip=93.176.145.128 that passing the IP as a parameter gives a lot of information.

If you know of any other similar, please tell me to include it.


AppXprt
AppXprt May 9
IP Tracker is a great tool, you might also like grabify IP Logger:

https://grabify.link/


This plugin would also be able to find VPN users, so be mindful of that as well.

Good Work :-)

The Forum post is edited by AppXprt May 9
Senior Developer Leader
Regular users should not be allowed to see other user's IP, that's a breach. Admins only should be allowed to do that.


Senior Developer.

Patricia Zorrilla Bcn

Yes, it is already planned.

I've been working on this new plugin for months, it's really very complete.

You will be surprised by the other developers for the technique used, the administrators for the control of users that it provides and the users for the information it gives on other profiles, and as in all my plugins for the paid members it gives a little extra info .

If the plugin is sold well I can add that you can put other websites to consult IP's, but in the 1st version I leave it fixed with the ones I find while I finish it.

I'm going to try this web to see how it is, thank you for collaborating.


Patricia Zorrilla Bcn
I already have 6 ... Most agree on the errors.

To highlight one that says that I myself am at 1200 km.

But it is only an extra.

What interests me is to compare the IP history of each time you login compared to the history of others.

Even if you try to enter with an account from work and with another from your mobile or from home, sooner or later you will access with the device that is not for reading messages or something.

No more self-voting photos and tricking other users!


The Forum post is edited by Patricia Zorrilla Bcn May 9
dave Leader
dave May 10
Patricia, please understand that just because something is possible does not mean that it should be done.  I understand what your saying and the reason for it.  But as a developer the first thing you have to understand in dev 101 and especially as a admin of a site, is that you have a huge responsibility to protect the users data.  Just because its available for gathering does not mean it needs to be made public, this is exactly the reason that FB and other companies are in hot water now and FB is losing tons of customers right now, privacy issues.


Dont put yourself in a situation where someone can come back on you and blame you for leaking someones location.  Lets say that a ex husband was trying to track down his ex wife or girfriend to hurt them, you do not want to be the source of that leak. 


So as you grow into a more polished developer just remember that its not just about making something work its about "is this a responsible thing to do'.  


I hope that helps you as you grow. .. :)

The Forum post is edited by dave May 10
AppXprt
AppXprt May 10
Yea only admins should be able to see all of this, but simple enough to switch to admin only views / controllers.
Patricia Zorrilla Bcn

I create the tools ... and in them I let the admin decide who has access and who does not.

I do not know about your websites, but there are many false profiles in mine, people who have several profiles to see the profile of someone who has blocked you with the other account ... I also have cases of people who "comment on how good they are the products "that he himself has for sale with another profile.

With my plugin the admin can easily detect these cases, and can let certain roles see it too.

I am interested that girls can not only block a boy but that the blockade extends to everyone who uses his IP.

I try to make plugins with new interesting functions for the users, not plugins with widgets that slow down the loading of the pages 

dave Leader
dave May 15
How about adding a hook at registration which will flag and prevent the new user account if the ip already exists in the DB. 


You need to be very careful with the wording of the error message though IMO... dont say ip already exists you dont want to say that for privacy reasons, you can just keep the error message simple and say something like 


Our system has detected another similar account, only one account per person is allowed.  


Now if they change their ip they can get by that flag but this should help stop bot account setups.   


But another challenge would be what if some bot uses an ip and sets up an account and then releases that ip back into the mix. If a real user tries to sign up it wont let them.   One way to handle this is to make sure that your plugin uses the last access ip rather than the signup ip.  The last access ip is part of the user data and should help this challenge. 

The Forum post is edited by dave May 15
Patricia Zorrilla Bcn

My plugin uses both IPs.

If they differ, it makes you two studies and not just one.

The study includes both have been used to connect or register.

In the list of results there are buttons to eliminate a friendship (or pending request), block / unblock, access to the profile, list of conversations you have had with it and many more things.

The admin can also see and delete private messages with a single click, log in as that member, edit their profile, suspend it and many other things with a single click. It is based on the information of many plugins if they are installed, and if they are not, then the information that they would get from them is simply not shown.

The admin sees everything, of course, and each thing can hide the others forever, establish if it shows according to user roles or let the user decide adding it to the privacy settings.

In this case, if a member chooses not to allow himself to see who has blocked him and whom he has blocked, he will not be able to see the blockages of the others either.

Some images ... But they are provisional, first I write the code and then I fix the data presentation. It is an evolution of my "userInfo" plugin ... but much improved.


Attachments:
  preview3.png (46Kb)
  preview4.png (35Kb)
  preview5.png (24Kb)
  preview1.png (188Kb)
  preview2.png (47Kb)
dave Leader
dave May 15

If it all is accurate data, its a fine plugin idea, good job. 


IMO users should never see who blocked them, it can be dangerious for the blocker. So who blocked me should never be shown to the person being blocked. 


And i am not even sure under what circumstances admin would need to see who blocked who, i cant think of one single case.  Because an admin should never tell anyone they have been blocked by a person.

The Forum post is edited by dave May 15
Senior Developer Leader
I'm saying this again: Regular users should not be able to see IP addresses  (doesn't matter if they did pay for it), website owners can be sued for displaying member's IP addresses because it is invasion of privacy. I'm not trying to scare you or discourage you from making good plugins, I'm trying to help you, there is other alternatives instead of displaying the IP just like dave pointed out. 


You need to read a lot about security to know why we are telling you this, please don't learn the hard way after something bad happens.


Ask yourself this: 

1. Would you visit and sign in to website that store and displays your IP address to other people so they can track you down and do harm to you?

2. Have you ever seen another website who displays your name and IP address? 


Domain registrars used to display this information but they are now forced to hide it to keep working and prevent to be sued for it.


Everything else looks good.


Senior Developer.

Patricia Zorrilla Bcn

I get it. Well, I'll modify it so that the IP is not shown on the screen. What is interesting is the utility of locating those who use it, not what it is.

Thanks for the tips! 

dave Leader
dave May 15

Quote from Senior Developer I'm saying this again: Regular users should not be able to see IP addresses  (doesn't matter if they did pay for it), website owners can be sued for displaying member's IP addresses because it is invasion of privacy. I'm not trying to scare you or discourage you from making good plugins, I'm trying to help you, there is other alternatives instead of displaying the IP just like dave pointed out. 


You need to read a lot about security to know why we are telling you this, please don't learn the hard way after something bad happens.


Ask yourself this: 

1. Would you visit and sign in to website that store and displays your IP address to other people so they can track you down and do harm to you?

2. Have you ever seen another website who displays your name and IP address? 


Domain registrars used to display this information but they are now forced to hide it to keep working and prevent to be sued for it.


Everything else looks good.


Senior Developer.


+1