Ok, what I would like to be done here is not as self explanatory as it first seems.

What I dont want is for everyone to be able to see their login history as a staff member sees it because in the event that their account gets compromised the compromiser can see their IP which for obvious reasons is not ideal.

What could be done however is that the IPs could be labelled in an arbritrary way, IP 1 IP 2 etc. This would allow you to see if a new IP has entered your account without letting everyone se your IP if they happen to get in and you could be notified if there is a new UP.

Now the issue with this is that many people have dynamic IPs (their IPs change quite a lot) so for these people this would he less beneficial, however since many IP tracing websites exist, and generally with dynamic IPs only the last sets of numbers in the IP change. So in this case the user is ONLY notified if a completely new IP enters their account. But they can still chexk out the login history any time.


if this suggestion is poorly written Ill try to give an example for USER A:

Earliest login at the top, !!! Indicates the incident being flagged as suspucious and the user notified by email & pm

1.1.1.1
1.1.1.1
1.1.2.1
1.1.1.2
1.1.1.2
1.1.1.3
1.1.1.1
2.2.3.4 !!!
1.1.1.1

the 1.1.1.1 would be the same for all users of course since the real IP is not being shown just an arbitrary version like this where 1 indicates the 1st entry for that number in the IP


This system would make hacking harder as if there is a single failed attempt (these show up on login history already) from a new IP the user will be motivated or preferably required to make a new password




Note: this was written on my phone so sorry in advance for typos

I think it's pretty cool. It could prevent hacking and fraud.

Very good idea, fairly well explained. I'd like to see this implemented.

If it's not possible for X or Y reason tho, it'd be nice if we could at least be notified if we connect in another country. It's far less reliable and useful, but it'd be "something".

Sure I agree that login history should be able to be accessed by the person who owns the profile. You would only be able to see YOUR own login history however the IPs and and whatnot should not be traceable.

Alts do not have different IP to mains, whether an account is an alt or not has nothing to do with IP.

IP is denoted by the router it is logged in through.

For the reasons I explained above you should not be able to see any IP in the login including your own. They should instead be indicated in an arbitrary fashion such as the one described in the OP.

The system you described Fates - I cant see any reason for, you can only see the times you logged in through the router you usually use? Why? It doesnt show you failed attempts and hacking or a successful attempt. I.E. it doesnt make hacking detection any easier for the user which is what Ive set out to do here.

Everything except that bit about the alts. I may have missworded that. my basic request is that ips can not be completely traceable by users using this feature.

If the system I said to use is used they wont be, of course I think the staff login history should stay the same

this could trick people to think there getting hacked when the just open the forums on accident and closed it,

Some tard claimed he would hack me not too long ago.
Something like this would've been good at the time.
Supported.

I don't like the idea of a prompt to change your password when you have a new IP address logging into your account. These pop-ups could be annoying for
people that log in from different locations regularly (Sparky <3). What could be good though is if when you logged in from a different IP then your last is if a
security question popped up that you as the user would have set before hand. This way even if a hacker gets your password and logs in if he doesn't know your
security question then he can't access your account. In the case of the hacker logging into your account via In-Game client then when he hits "log in" a new
tab/window would open from his browser prompting the security question.

Also to make sure that the security question is actually impossible to guess I would recommend making both the answer and question completely custom by
having the user type it their self. Questions with drop down menus just aren't secure enough these days.