Administrative and Maintenance Tools - Temporary Passwords by BOP5 (Allow admins to login as any user without user password)

Brought to you by BirdOPrey5 / Qapla.com

The purpose of this mod is to allow a site Super Administrator to login as any other user on the forum for troubleshooting purposes.

I know there are other mods that allow Admins to login as other users but they aren't truly logged in as the other user. It's more like they are getting a copy of the user's permissions ans settings. This is good for many things but it is not 100% exact and therefore can cause its own problems when trying to troubleshoot issues.

This mod is different. On the user's setting page in the Admin CP is a new box "Temporary Password" where an admin can enter a temporary one-time use password. When they save the user settings the user's old password is copied (while remaining encrypted) to another location and the temporary password they created becomes the user's new password.

As soon as possible they should then log in as the user with the password they set.

As soon as the Admin (or anyone) has logged in successfully with the temporary password the user's old password is restored and the temporary password is deleted.

In the mean time the Admin will continue to be able to use the forum as the user so long as they don't log out. If they do inadvertently log out they can set another temp password and log back in.

Due to the nature of the mod you should aways use the temp password as soon as possible- if you wait and the user tries to login when the temporary password is set they won't be able to.

I suggest using a 2nd web browser when using this. For example in Chrome you are logged in as yourself (Admin Account) but you use Firefox to log into the user's account. This allows you to quickly switch between accounts to troubleshoot.

If you change your mind and don't need the temp password after all simply return to the user's settings page in Admin CP and delete the temporary password and save changes. The user's original password will be restored.

If you uninstall the mod any temporary passwords you had set will be automatically undone and the user's original passwords restored.

There are no settings for this mod. Install it and it is active.

Only Super-Administrators specified in the config.php file can set or see temporary passwords, other admins will not be able to set or see temp passwords, the box just won't be there.

Compatible with VB 3.8.x & VB 4.x.x.

------------------------------------------------------

Please "Mark as Installed" if you use this.
Donations always appreciated. :up:
Nominate MOTM if you LOVE it!

[BirdOPrey5]

Reserved.

[Manoel J?nior]

Wow, thanks! Tagged

[Barcham]

Installed and tested on 4.2.2 and it works perfectly. I can see this being very useful for troubleshooting member problems when they come up.

[Alan_SP]

Excellent idea. :up:

[ahobilam]

Really it is a super mod for Admins of vb!
Given full rating and nominated.
One more request,
As we are using a mod "Useful Postings"
can you create a mod with a button "Attention Admin" button in all postings
by clicking that button by a user who wants urgent help from Admin,
A fast (priority) email should be sent to admin email.
Or if the admin is online a notification popup window can be displayed for Admin only.
This will be most helpful for all admins.
Please consider.
Expecting your favorable reply at the earliest.
Thanks in Advance.

[Snowhog]

Installed.

Thank you for the hard work you do to bring us such excellent MODS.

[BGObsession]

I like the approach here - only thing keeping me from installing is that I know with previous 'Log In as User' mods, it's very easy to forget you are logged in and accidentally post under that user's name. The mods I've used previously would put some kind of a banner warning on all pages when logged in as that user as a reminder. Just a thought, otherwise I like it

[BirdOPrey5]

Understand the concern but that banner is one of the main reasons I made this mod- it needs to be an exact login as a user to troubleshoot- anything different would defeat the purpose.

You do need to be careful but if you're only using it for serious trouble-shooting it shouldn't be a problem- I open the user's account in a completely separate browser and close it as soon as I'm done.

[Barcham]

There is another situation that this can be used in that no one has mentioned yet. It is extremely useful for generating a one time only password for members who have lost their password and have requested a reset. You can generate a new password for the user and forward it with instructions that they can only use it once and must change their password at login.