vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   Modification Requests/Questions (Unpaid) (https://vborg.vbsupport.ru/forumdisplay.php?f=112)
-   -   Mod for posting as alternate users? (https://vborg.vbsupport.ru/showthread.php?t=278926)

Max Taxable 03-23-2012 06:32 PM

Quote:

Originally Posted by kh99 (Post 2312504)
Oh, I see, so anyone with access could become superadmin. That is kind of a problem.

Yes, kind of. They could literally jump into the super's account without leaving any trace of having been there - no IP, nothing. Unless of course they were dumb enough to post with the account.

This includes reading the super's PMs, access to SA-only functions, you get the picture.

Then all they have to do is UN-link themselves from the account, and no one's the wiser!

Boofo 03-23-2012 06:49 PM

Quote:

Originally Posted by Max Taxable (Post 2311825)
That one puts a BIG security hole in, if you don't add the code to it I posted in that thread.

So, exactly where would you add it in Kevin's mod?

Max Taxable 03-23-2012 06:51 PM

Quote:

Originally Posted by Boofo (Post 2312588)
So, exactly where would you add it in Kevin's mod?

I didn't examine it at all. Not sure if it's even the same thing.

BirdOPrey5 03-23-2012 06:59 PM

I don't think this would be an issue in kh99's mod.

kh99 03-23-2012 07:36 PM

Quote:

Originally Posted by BirdOPrey5 (Post 2312593)
I don't think this would be an issue in kh99's mod.

I think you're right. Mine only lets you post, and so you'll have the ip address. But it might be useful to be able to set up users or groups that you can't post as.

talktofrank 03-23-2012 09:31 PM

ok have installed it and it works fine, the only thing that this doesnt have that the smf did have (and it was a great feature) was then when you started typing it listed the users starting with that letter

its very helpful when you control lots of usernames and cant remember how to spell them all correctly.

not sure what kind of work is needed to include that

update

Ah cool, i just realised that it does show the names after you type the first 3 characters, its a little slow and would be better if it should up after typing the first character

kh99 03-23-2012 09:40 PM

Quote:

Originally Posted by talktofrank (Post 2312634)
Ah cool, i just realised that it does show the names after you type the first 3 characters, its a little slow and would be better if it should up after typing the first character

I copied the existing username lookup (used in registration and sending pms) so I'm not sure. I can't do anything about the speed, but I'll look and see if I could change it to work after one character (I think probably it doesn't do that because a lot of forums have too many users for that to work).

What I was thinking about adding is a list of users that you previously posted as so you can choose from a drop-down.

Max Taxable 03-23-2012 09:47 PM

Quote:

Originally Posted by kh99 (Post 2312637)
I copied the existing username lookup (used in registration and sending pms) so I'm not sure. I can't do anything about the speed, but I'll look and see if I could change it to work after one character (I think probably it doesn't do that because a lot of forums have too many users for that to work).

What I was thinking about adding is a list of users that you previously posted as so you can choose from a drop-down.

That's what the other one has, a drop-down menu by your username in navbar where it says, "Welcome, kh99."

talktofrank 03-25-2012 04:34 PM

so in kh99's mod you need to set the userid that you want to use this mod. I have set it to only my account id.

Is there still a security hole in it if you only set it to your id?

kh99 03-25-2012 04:53 PM

I welcome other people's responses, but I'd say no. It doesn't really have the same problem because this mod only lets you post. The other mod mentioned above actually logged you in as the other user, and any mod or admin could become a superadmin. However, my mod does allow anyone with access to the settings in the admincp to change who's allowed to use it, so if you have other admins they can probably add themselves to the list of allowed users. I'm not sure how to get around that - I guess if I made it it's own option menu instead of adding to the existing options then I could restrict it to superadmins. Or I could just put settings in the config.php.


All times are GMT. The time now is 11:32 PM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.04118 seconds
  • Memory Usage 1,740KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (6)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (3)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (10)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete