[blastme]

A member did a page source view of a post on my site and took a screenshot of it. Its the one I have attached.


This member claims the code means I have the admin log in as user hack installed on my site. But its not installed nor has it ever been. So now this member is spreading rumors that an admin on my site has been logging in as a user and making posts.


So was wondering if someone could shed some light on this.


TIA

[ozzy47]

If that code is in your source code, then it is from this mod, http://www.vbulletin.org/forum/showthread.php?t=168819

[ForceHSS]

I would ban the user or at least give him a warning after all he is a member you are the owner

[ShawneyJ]

Originally Posted by ozzy47

If that code is in your source code, then it is from this mod, http://www.vbulletin.org/forum/showthread.php?t=168819

yes, indeed that is the hack the source code is from. in my option, theres one place you can see this source code, (only if hack is installed) and thats in "Admin Log In As User" "fetch_userinfo_query" in plug in section Plugin Manager. which im guessing built into xml.

if a guest/member was to view the source of this members admin profile without the plug in installed. all they will see is:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

correct me if im wrong.

because i did see an option to edit memberinfo template to add:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

blastme, it really is easy for a member to stir trouble on a forum and say take a screen cap of example this: see in attachment. which i got from: http://pastebin.com/9HJw2W31 thx to google. also if this hack did let the public see its source, you would think google would paste it all over the net in search example "!$processed_admin_log_in_as_user"

maybe double check in Plugin Manager for any tracers. but sure do believe you. can you find where this source if found like on what page of your forum?

[blastme]

Originally Posted by ShawneyJ

yes, indeed that is the hack the source code is from. in my option, theres one place you can see this source code, (only if hack is installed) and thats in "Admin Log In As User" "fetch_userinfo_query" in plug in section Plugin Manager. which im guessing built into xml.

if a guest/member was to view the source of this members admin profile without the plug in installed. all they will see is:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

correct me if im wrong.

because i did see an option to edit memberinfo template to add:

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

blastme, it really is easy for a member to stir trouble on a forum and say take a screen cap of example this: see in attachment. which i got from: http://pastebin.com/9HJw2W31 thx to google. also if this hack did let the public see its source, you would think google would paste it all over the net in search example "!$processed_admin_log_in_as_user"

maybe double check in Plugin Manager for any tracers. but sure do believe you. can you find where this source if found like on what page of your forum?

Guess I am not understanding because the hack is not installed. I do not have log in as this user in the drop down menu of quick user links and never have. It does not show up as an option in administrator permissions.


How would I double check in plugin manager for any tracers. ? The member said that he right clicked on a post on my site, click on view source code and that is where the code came from. I don't see it when I try it but than he'll say I had it installed and removed it.


I never even knew there was a hack like this.

[ozzy47]

If you want PM me a admin account and a link to the site and I can check it out for you.

[Max Taxable]

Originally Posted by blastme

Guess I am not understanding because the hack is not installed. I do not have log in as this user in the drop down menu of quick user links and never have. It does not show up as an option in administrator permissions.


How would I double check in plugin manager for any tracers. ? The member said that he right clicked on a post on my site, click on view source code and that is where the code came from. I don't see it when I try it but than he'll say I had it installed and removed it.


I never even knew there was a hack like this.

Dude might be just making it up in a attempt to discredit you.

[ozzy47]

It's entirely possible, that's why I want to have a look around.

[blastme]

This is the screen shot that member posted on another site with saying it proves I have that hack installed.

[blastme]

Originally Posted by ozzy47

If you want PM me a admin account and a link to the site and I can check it out for you.

Sent you a PM.

[Digital Jedi]

Originally Posted by blastme

This is the screen shot that member posted on another site with saying it proves I have that hack installed.

I don't know what that really proves, other than he can take screenshots. I don't even really know what the accusation is supposed to be. A lot of admins log in as other users to participate, moderate and troubleshoot in their forums. Common practice and indicative of nothing duplicitous. If you've checked to make sure the mod isn't installed (which, again, there's nothing wrong with that), ban him. Ignore him. Move on to enjoying administrating your forum. Enough is enough.

[Paul M]

Originally Posted by blastme

The member said that he right clicked on a post on my site, click on view source code and that is where the code came from.

Then that member is a complete liar.

That code is php code, you cannot right click on a post and view php code, only the post html.

[Max Taxable]

Clearly he went to alot of trouble to photoshop this up.... Looks like you have a real nutter on your hands.

[ozzy47]

Yeah the mod is not on there, the dude is a liar.

[Lynne]

Originally Posted by Paul M

Then that member is a complete liar.

That code is php code, you cannot right click on a post and view php code, only the post html.

LOL As Paul said, it is PHP code. You can see it is the PHP code in one of the plugins if you download the modification.