Tutorial SOLUTION FOR THE issue of Leaked MAG user and password ON XTREAM UI BASED PANEL

[samiazziz4]

hi finally i have found solution for the issue of Leaked MAG user and password associated to mag account on all xtream ui f22 based panel:

please firt go to ssh on mainserver

tape this command :
crontab -e
then enter shoose first choice "nano editer" you are now in the black screen so go to the last line and add those two command :
where mysqlpass is youre root mysql password dont put user_iptvpro password

To view the content, you need to Sign In or Register.

then

Control+o to save then Control+x to exit the black screen

now all users and password of mag account will change automaticlly every 2 minutes

 

[samiazziz4]

we need more reaction to see the solution

 

[noris]

Can use mysql events:

CREATE  /* DEFINER=`root`@`localhost` */ EVENT `change_mag_pass` ON SCHEDULE EVERY 1 MINUTE STARTS '1970-01-01 00:00:00' ON COMPLETION NOT PRESERVE ENABLE DO UPDATE users SET password=LEFT(MD5(RAND()), 20) WHERE is_mag=1;

Changing password is enough. if using billing system will have a problems if change mag users.

 

[samiazziz4]

solution for the issue of Leaked MAG user and password associated to mag account on all xtream ui f22 based panel:

please firt go to ssh on mainserver

tape this command :
crontab -e
then enter shoose first choice "nano editer" you are now in the black screen so go to the last line and add those two command :
where mysqlpass is youre root mysql password dont put user_iptvpro password

To view the content, you need to Sign In or Register.

then

Control+o to save then Control+x to exit the black screen

now all users and password of mag account will change automaticlly every 1 minute

 

[guetteur]

@samiazziz4
What the point of repeating the same thing ?
you can just edit your first post and make a note : the time can be adjusted (every 1 min or 2 or 3 ...)

 

[Moutamared]

if the user is connected, it will cause on a desconnect when you change the user or password
not a perfect solution so far

 

[squallp]

if the user is connected, it will cause on a desconnect when you change the user or password
not a perfect solution so far

This is not true. Changing the password will not cause a disconnection

 

[samiazziz4]

This is not true. Changing the password will not cause a disconnection

Hi i have put this solution 2 week ago i have mag at my home and i insure no disconection for real mag user but the person who use username and password will be disconnected

if the user is connected, it will cause on a desconnect when you change the user or password
not a perfect solution so far

Hi i have put this solution 2 week ago i have mag at my home and i insure no disconection for real mag user but the person who use username and password will be disconnected

 

[squallp]

Hi i have put this solution 2 week ago i have mag at my home and i insure no disconection for real mag user but the person who use username and password will be disconnected

Yes exactly

 

[mangosa]

If he downloads the list, reads the user and password from the database, then changes the channel and reads the user and password again, what's the point?

 

[noris]

Everything working, except catch up, cant forward/backward.

 

[akawi11]

that can be the fix, is lacked mac address use the user & pass to access, because there is option to change password on every login "Allow STB Password Change"
also MAG Security = YES ( will not let user/pass m3u work )
also need to add
just if user is active and connected online
enabled=1
exp_date
not expired users
so to focus just on online active users, not need to let sql work updates users that already not connected and expired

 

[samiazziz4]

that can be the fix, is lacked mac address use the user & pass to access, because there is option to change password on every login "Allow STB Password Change"
also MAG Security = YES ( will not let user/pass m3u work )
also need to add
just if user is active and connected online
enabled=1
exp_date
not expired users
so to focus just on online active users, not need to let sql work updates users that already not connected and expired

hi those options are not avalable on xtream ui ??

 

[ramitr]

i tested today , mag 250 after user and password change it's blackscreen need to reload portal for come back

if you putted 5 min to reset user/pass mag device after 5 min mag 250/254 Gone you need to reload portal for work back again.
how fix this issues?
im using streamcreed.

 

[noris]

No need to reload, just change 2 channels.

 

[terminatortv]

hi finally i have found solution for the issue of Leaked MAG user and password associated to mag account on all xtream ui f22 based panel:

please firt go to ssh on mainserver

tape this command :
crontab -e
then enter shoose first choice "nano editer" you are now in the black screen so go to the last line and add those two command :
where mysqlpass is youre root mysql password dont put user_iptvpro password




*** Hidden text: cannot be quoted. ***

then

Control+o to save then Control+x to exit the black screen

now all users and password of mag account will change automaticlly every 2 minutes

Thank you, working great for now. Any more ideas how to protect even more MAG users?

 

[mroz]

is a very old thread but how can I change all passwords at once with normal lines?
and it works by mag users

 

[samiazziz4]

is a very old thread but how can I change all passwords at once with normal lines?
and it works by mag users

here is the sql command

To view the content, you need to Sign In or Register.

 

[mroz]

here is the sql command

i have testet bro but it do not works

 

[levent]

hi finally i have found solution for the issue of Leaked MAG user and password associated to mag account on all xtream ui f22 based panel:

please firt go to ssh on mainserver

tape this command :
crontab -e
then enter shoose first choice "nano editer" you are now in the black screen so go to the last line and add those two command :
where mysqlpass is youre root mysql password dont put user_iptvpro password




*** Hidden text: cannot be quoted. ***

then

Control+o to save then Control+x to exit the black screen

now all users and password of mag account will change automaticlly every 2 minutes

If country lock and isp lock is enabled, what is the problem?

Those are measurements that most of people must use to prevent such activities.