Version 3.0 was created for both vb3.6 and vb3.7. I will no longer give support in this thread for this hack. Please click 'install' in the vb3.7 section for notifications about updates.
If an admin knows anything about their SQL database, then you'd already be able to 'abuse' it in the most extreme method - without no one EVER knowing.
Nice hack, thank you very much, although I think there is a problem with it.
When I log in as a user, and try to view someone elses member profile page, it only shows the page of the person you're logged into. I realise this might not be the most important thing that needs fixing, but I figured I'd let you know anyway.
/installed
Oh, and one more thing, I don't know if this is important or not, but the link you click to log back in as yourself looks like this: index.php?[sessionurl]&log_out_admin_log_in_as_user=true (note: [sessionurl]). It still works as it's meant to (I think), but this didn't look right.
Nice hack, thank you very much, although I think there is a problem with it.
When I log in as a user, and try to view someone elses member profile page, it only shows the page of the person you're logged into. I realise this might not be the most important thing that needs fixing, but I figured I'd let you know anyway.
/installed
Oh, and one more thing, I don't know if this is important or not, but the link you click to log back in as yourself looks like this: index.php?[sessionurl]&log_out_admin_log_in_as_user=true (note: [sessionurl]). It still works as it's meant to (I think), but this didn't look right.
I know about the sessionurl problem. I keep forgetting to fix that.
OK, well I've just had another look, and what I said was not totally correct anyway.
If I log in as one of my members, then view their profile page (say http://theice.co.uk/member.php?u=77 for example), then it'll show their info. But if I view my own profile page while logged in as one of my members (in this case http://theice.co.uk/member.php?u=1), rather than showing my info, it shows the info of the person I'm logged in as.
Anyway, I don't supose its all that important, I thought I'd just let you know.
Oh, and if you fix the [sessionid] thing, let me know (or have you already? and if so, do you just import the product and overwrite?)
OK, well I've just had another look, and what I said was not totally correct anyway.
If I log in as one of my members, then view their profile page (say http://theice.co.uk/member.php?u=77 for example), then it'll show their info. But if I view my own profile page while logged in as one of my members (in this case http://theice.co.uk/member.php?u=1), rather than showing my info, it shows the info of the person I'm logged in as.
Anyway, I don't supose its all that important, I thought I'd just let you know.
Oh, and if you fix the [sessionid] thing, let me know (or have you already? and if so, do you just import the product and overwrite?)
Admin Log In As User Details »»
About Developer
Uses Plugins 
No support by the author.
08-21-2006, 04:19 AM
