[blastme]

Originally Posted by ShawneyJ

yes, indeed that is the hack the source code is from. in my option, theres one place you can see this source code, (only if hack is installed) and thats in "Admin Log In As User" "fetch_userinfo_query" in plug in section Plugin Manager. which im guessing built into xml.

if a guest/member was to view the source of this members admin profile without the plug in installed. all they will see is:

<!-- Start Admin Log In As User -->
<li class="thead"><a href="index.php?u=26971&amp;admin_log_in_as_user=+++">Log In As This User</a></li>
<!-- End Admin Log In As User -->

correct me if im wrong.

because i did see an option to edit memberinfo template to add:

<!-- Start Admin Log In As User -->
$admin_log_in_as_user_link
<!-- End Admin Log In As User -->

blastme, it really is easy for a member to stir trouble on a forum and say take a screen cap of example this: see in attachment. which i got from: http://pastebin.com/9HJw2W31 thx to google. also if this hack did let the public see its source, you would think google would paste it all over the net in search example "!$processed_admin_log_in_as_user" :erm:

maybe double check in Plugin Manager for any tracers. but sure do believe you. can you find where this source if found like on what page of your forum?

Guess I am not understanding because the hack is not installed. I do not have log in as this user in the drop down menu of quick user links and never have. It does not show up as an option in administrator permissions.


How would I double check in plugin manager for any tracers. ? The member said that he right clicked on a post on my site, click on view source code and that is where the code came from. I don't see it when I try it but than he'll say I had it installed and removed it.


I never even knew there was a hack like this.