[Bison]

What would make this hack even more secure is if you could make the ip address range of the login user an added *Condition* that disallows the user to remove anyone from the Admin list ... other than the TOP Admin (Who IP Falls inside a Range).

Example:

-------DO NOT COPY THIS LINE-------

if ($userid==X) and ($bbuserinfo[userid]!=X and ($bbuserinfo[ipaddress]!= [IP RANGE OF THE ADMIN]) {
echo "<p>You cannot update this Admin.</p>";
cpfooter();
exit;
}

-------DO NOT COPY THIS LINE-------

Also if you could capture the IP of the logged in user, and make a match of the one that the ADMIN assigned, this would give a lot more security than what's included in this hack.

From what I see and what someone already mentioned ... all they need is you password ... this would stop anyone with your password from making changes.

Your opinions ...