Login as user

Hi
this hack allows admins to login as any user they want. In the Adminpanel you´ll have a link in the "edit user"-screen which allows you to login as the user. Good for testing and finding errors that the user reports etc

Only 1 File to edit (admin/user.php)
Installationtime: < 5 minutes

[firewars]

Never mind, I found it using another part of the whole line.
This is what mine looks like:

PHP Code:

  <li>".makelinkcode("View the profile for $user[username]","../member.php?s=$session[sessionhash]&action=getinfo&userid=$userid",1)."</li> 


[malc]

remplace

PHP Code:

+-------------------------------------------------------------------------------------------------+
| In admin/user.php, find this code:                                                              |
+-------------------------------------------------------------------------------------------------+
<li>\".makelinkcode(\"View the profile for $user[username]\",\"../member.php?s=$session[sessionhash]&action=getinfo&userid=$userid\",1).\"</li>
+-------------------------------------------------------------------------------------------------+

+-------------------------------------------------------------------------------------------------+
| After this, add:                                                                                |
+-------------------------------------------------------------------------------------------------+
<li>\".makelinkcode(\"View the profile for $user[username]\",\"../member.php?s=$session[sessionhash]&action=getinfo&userid=$userid\",1).\"</li>
<li>\".makelinkcode(\"Login as User\",\"user.php?s=$session[sessionhash]&action=loginas&userid=$user[userid]\",1).\"</li>
+-------------------------------------------------------------------------------------------------+ 


by

PHP Code:

+-------------------------------------------------------------------------------------------------+
| In admin/user.php, find this code:                                                              |
+-------------------------------------------------------------------------------------------------+
<li>".makelinkcode("View the profile for $user[username]","../member.php?s=$session[sessionhash]&action=getinfo&userid=$userid",1)."</li>
+-------------------------------------------------------------------------------------------------+

+-------------------------------------------------------------------------------------------------+
| replace with:                                                                                |
+-------------------------------------------------------------------------------------------------+
<li>".makelinkcode("View the profile for $user[username]","../member.php?s=$session[sessionhash]&action=getinfo&userid=$userid",1)."</li>
<li>".makelinkcode("Login as User","user.php?s=$session[sessionhash]&action=loginas&userid=$user[userid]",1)."</li>
+-------------------------------------------------------------------------------------------------+ 


[Chris M]

Is there any way to restrict this function to just Userid 1?

Or is it already?

Satan

[Hotte]

Originally posted by hellsatan
So what exactly can you do then?

Log in as the user and do exactly what they can?

Can you login as other Admins or Mods?

Satan

You can login as any user you want.

Originally posted by malc
great hack ... but don't work

Try adding the "if ($action=="loginas"){" - Code before "cpheader();" at the beginning of the file (near line 42)

Originally posted by hellsatan
Is there any way to restrict this function to just Userid 1?

Or is it already?

Satan

All Admins can do that. But for a quick solution you can add the following code directly after "if ($action=="loginas"){" (not tested)

PHP Code:

if($bbuserinfo[userid]!=1)show_nopermission(); 


[scsa20]

actuly, to code to use for limiting it to just you is:

PHP Code:

if ($bbuserinfo['userid']!=1) 
{show_nopermission(); exit; } 


you seem to forgot the exit; command

oh, forgot to add...it so'pose to go in before

PHP Code:

if ($action=="loginas"){ 


[Dean C]

please dont have a go at me here... but i think that this is the worst possible hack someone could have ever made... i would hate someone to be able to login in as me at a board i post at... it ruins the point of having users...

this is just my opinion tho ... i dont like this idea

sorry

- Mist

[firewars]

Well, I won't abuse the ability and only use it, if there are specific and someone's account-related problems that have to be solved.

[-=dm=-]

Nice one thanx

[Lovaboye]

i just get a blank screeen? doesnt work? what is wrong?

[firewars]

Please remove any backslashes as shown by malc on the first page.