Miscellaneous Hacks - Cyb - Login To User Account

Info:
This will allow forum administrators to simply login to user accounts (to test forum functions, permissions etc...). SuperAdmin can choose admins who are able to use this function. SuperAdmin can set also who can login to other admin accounts. "Login As User" is shown in member profiles and Quick User Links (can be disabled). Option is automatically hidden in your own account and if target user is admin while you have no permissions to login to admin accounts.

See screenshots.


Installation:
1. Import XML file (as product): AdminCP > Plugin System > Manage Products > [Add/Import Product]


Variables:
-Link to login to user in memberinfo: $cyb_ltoua_link_mi
-Logged in as user alert: $cyb_ltoua_alert


To set options:
Go to: AdminCP > vBulletin Options > Cyb - Login To Other User Account


Versions:
v1.0 - May 20. 2006.
-First Release
v1.1 - May 21. 2006.
-Now SuperAdmin can log into other admins
v1.2 - Aug 04. 2006.
-Release of this hack for vB v3.6
v1.5 - Aug 29. 2006.
-Added option to easily go back to admin account
-Alert can be enabled/disabled
-Added "Product Version Checking"
-Only Admins allowed to use function can see "Login As" links
-Several code improvements
v1.6 - Sep 01. 2006.
-Fixed bug (error message at the top of "add new user" page)
-Fixed bug (uncached template)
v1.7 - Sep 05. 2006.
-Now only SuperAdmin can access settings where you choose which Admins can use the hack
-You can also set Admins who will be able to use other Admins accounts (only SuperAdmin can set this)
-Alert moved to navbar so it is now shown on any page to Admin who is logged in as someone else
v1.8 - Apr 23. 2007.
-"Last activity" not changed for target user when admin used account
-"Login As User" automatically hidden in your own account and if target user is admin and you have no permissions to login to admin accounts
-Admin not logged out from ACP when back to original account, except session expired regularly
-Added option to modify alert box CSS
-Many other code improvements and optimizations
-If you have older version of this hack installed please uninstall it before installing latest version or it will not work properly
v1.9.1 - Jul 23. 2007.
-Fixed bug (Security Exploit)
-Fixed bug ("login as user" doesn't work if you access user profile via last post info)
-"Go back" alert moved to header (for must of users there is no need to edit custom styles anymore)
-Now you can go back from banned user accounts without clearing cookies manually
v2.0 - Nov 08. 2007.
-New: Actions logged in Moderator Log
-Fixed bug where admins with primary usergroup different than 6 are not able to use hack
-Several minor bugs fixed
--You MUST uninstall older version before installing this one in order to get it working properly
v2.1 - May 03. 2008.
-Compatible with vBulletin 3.7
-Minor bugs fixed
v2.2 - Jun 23. 2008.
-Added option to disable logs
-Added option to switch to vB 3.6.x compatibility mode
-Fixed bug (session lost for target user when you go back to admin)
-Fixed bug (sessions lost for guests/bots when you login as another user)
-Made several compatibility improvements
v2.3 - Apr 11. 2009.
-Bug fix (non-Admins able to login to user accounts in some cases)
-Bug fix (Admin can not search product entries in ModLog by product ID)
-Bug fix (logging error if username contains special characters)
-Bug fix (Admin must be member of usergroup 6 to use product)
-Minor bugs fixed


Click INSTALL if you like this hack.

[a9eel]

is it fix secure or what

[Oblivion Knight]

All seems to be working just groovy. Thanks!

[Nadavy]

I'm wondering the same thing. Is it secure now?

[e@sy]

vBulletin 3.8.2
AddOn 2.3

In AdminCP we have a quicklink "Login as User". It is from a hook "useradmin_edit_start" in admincp/user.cp. There ist a array $quicklinks.

But the same hook is in modcp/user.cp but there ist no array $quicklinks, So i got en error in ModCP/user search/show profil.

I have removed the hook on line 348

($hook = vBulletinHook::fetch_hook('useradmin_edit_start')) ? eval($hook) : false;

[e@sy]

I have change the plugin Cyb - Login To User Account - EU Hook useradmin_edit_start

The change is in the first/last line
first line

PHP Code:

if ($quicklinks){ 


last line

PHP Code:

} 


Original

PHP Code:

if ($vbulletin->options['cybltua_enable'] AND $_REQUEST['do'] != 'add')
        {
            $db->hide_errors();
            $cybltua_getadmins = $vbulletin->db->query_read("
                SELECT id, admins, superadmins, lastadmin
                FROM " . TABLE_PREFIX . "cyb_logintouser AS cyb_logintouser
                WHERE id = '1'
            ");
            while ($cybltua_admins = $db->fetch_array($cybltua_getadmins))
            {
                $cybltua_canadmin = $cybltua_admins[admins];
                $cybltua_canadminall = $cybltua_admins[superadmins];
            }
            eval('$cybltua_validadmin = in_array($vbulletin->userinfo[userid], array(' . $cybltua_canadmin . '));');
            eval('$cybltua_validsuperadmin = in_array($vbulletin->userinfo[userid], array(' . $cybltua_canadminall . '));');
            $db->show_errors();

            if ($vbulletin->options['cybltua_link_acp'] AND in_array($vbulletin->userinfo['userid'], array($cybltua_validadmin)) AND ($vbulletin->GPC['userid']!=$vbulletin->userinfo['userid']))
            {
                $vbulletin->input->clean_gpc('r', 'userid', TYPE_UINT);
                $cybltua_target_data = $vbulletin->db->query_first("SELECT userid, password, usergroupid, lastactivity FROM " . TABLE_PREFIX . "user as user WHERE userid='".$vbulletin->GPC['userid']."' ");
                if (is_member_of($cybltua_target_data,6) AND (!in_array($vbulletin->userinfo['userid'], array($cybltua_validsuperadmin))))
                {
                    return;
                }
                else
                {
                    $quicklinks = array_merge($quicklinks, array("../member.php?" . $vbulletin->session->vars['sessionurl'] . "do=cyb_loginasuser&u=" . $vbulletin->GPC['userid'] => $vbphrase['cyb_ltua_title'],));
                }
            }
        } 


change

PHP Code:

if ($quicklinks){
if ($vbulletin->options['cybltua_enable'] AND $_REQUEST['do'] != 'add')
        {
            $db->hide_errors();
            $cybltua_getadmins = $vbulletin->db->query_read("
                SELECT id, admins, superadmins, lastadmin
                FROM " . TABLE_PREFIX . "cyb_logintouser AS cyb_logintouser
                WHERE id = '1'
            ");
            while ($cybltua_admins = $db->fetch_array($cybltua_getadmins))
            {
                $cybltua_canadmin = $cybltua_admins[admins];
                $cybltua_canadminall = $cybltua_admins[superadmins];
            }
            eval('$cybltua_validadmin = in_array($vbulletin->userinfo[userid], array(' . $cybltua_canadmin . '));');
            eval('$cybltua_validsuperadmin = in_array($vbulletin->userinfo[userid], array(' . $cybltua_canadminall . '));');
            $db->show_errors();

            if ($vbulletin->options['cybltua_link_acp'] AND in_array($vbulletin->userinfo['userid'], array($cybltua_validadmin)) AND ($vbulletin->GPC['userid']!=$vbulletin->userinfo['userid']))
            {
                $vbulletin->input->clean_gpc('r', 'userid', TYPE_UINT);
                $cybltua_target_data = $vbulletin->db->query_first("SELECT userid, password, usergroupid, lastactivity FROM " . TABLE_PREFIX . "user as user WHERE userid='".$vbulletin->GPC['userid']."' ");
                if (is_member_of($cybltua_target_data,6) AND (!in_array($vbulletin->userinfo['userid'], array($cybltua_validsuperadmin))))
                {
                    return;
                }
                else
                {
                    $quicklinks = array_merge($quicklinks, array("../member.php?" . $vbulletin->session->vars['sessionurl'] . "do=cyb_loginasuser&u=" . $vbulletin->GPC['userid'] => $vbphrase['cyb_ltua_title'],));
                }
            }
        }
} 


[RedFoxy]

I've it installed and it's great but after I installed Cyb - Advanced Forum Rules I loose the button to log as the users

[Sador]

Originally Posted by markuswarren

Firstly, An absolutely excellent mod!

Secondly, is it possible to add the "Login as User" option to the Postbit (postbit_legacy in this case) popup menu that you get when you click on a users name when viewing a thread? If so, what do I need to do? I can see the section in the postbit_legacy template where the other popup options are, but I'm unsure as to exactly what to put in there to log the user in.

I agree with this, it's a great addon. Still, this feature would be nice. Is it possible to get that?

[Amiga Harrison]

Originally Posted by Super Jinni

I just found a bug:
in modcp when super moderator go to view user's profile he gets this error:

Warning: array_merge() [function.array-merge]: Argument #1 is not an array in [path]/modcp/user.php(348) : eval()'d code on line 29

this error appear when viewing this page:
[URL]http://www.yoursite.com/forum/modcp/user.php?do=viewuser&u=xxx[/URL]
were xxx is the user id

or by going - in modcp - Users -> Search for Users -> then type user name -> [View Profile] and there it is.

hope you could fix that ASAP.

thanks -Cyp for all your great work

I also get this error message in exactly the same way with this mod installed.

Worth noting is that another similar (but not as good) mod called Admin login as user also produces exactly the same error.

So I think this error must occur with any mod currently designed to log a mod/admin in as another user.

I hope you can find a fix for this. It doesn't stop either mod from working, just shows the error at the top of this search user mp page. So it can be lived with.

[Kolbi]

There are bug with the vb 3.8.4 can you please resolve them?

[markuswarren]

Originally Posted by Sador

I agree with this, it's a great addon. Still, this feature would be nice. Is it possible to get that?

I did manage to work out how to do the addition to the user pop-up menu, and I've been rather lax in posting what I did, so I'll rectify that now:

Upon editing postbit_legacy look for:

$template_hook[postbit_user_popup]

then after copy and paste the following:

	<if condition="is_member_of($vbulletin->userinfo, array( 6))">
	<tr><td class="vbmenu_option"><a href="member.php?do=cyb_loginasuser&u=$post[userid]">Log In As User</td></tr>
	</if>

The conditional checks to see if the user is in the admin group and thus only presents the option to admin users.

I've been using this for a little while and it works like a charm.