Register Members List Search Today's Posts Mark Forums Read

Reply
 
Mod Options
Cyb - Login To User Account Details »
Cyb - Login To User Account
Mod Version: 2.3, by Valter (Coder) Valter is offline
Developer Last Online: May 2014 I like it Show Printable Version Email this Page

vB Version: 3.8.x Rating: (63 votes - 4.89 average) Installs: 951
Released: 10 Jan 2009 Last Update: 11 Apr 2009 Downloads: 4834
Not Supported DB Changes Uses Plugins Auto-Template  

Info:
This will allow forum administrators to simply login to user accounts (to test forum functions, permissions etc...). SuperAdmin can choose admins who are able to use this function. SuperAdmin can set also who can login to other admin accounts. "Login As User" is shown in member profiles and Quick User Links (can be disabled). Option is automatically hidden in your own account and if target user is admin while you have no permissions to login to admin accounts.

See screenshots.


Installation:
1. Import XML file (as product): AdminCP > Plugin System > Manage Products > [Add/Import Product]


Variables:
-Link to login to user in memberinfo: $cyb_ltoua_link_mi
-Logged in as user alert: $cyb_ltoua_alert


To set options:
Go to: AdminCP > vBulletin Options > Cyb - Login To Other User Account


Versions:
v1.0 - May 20. 2006.
-First Release
v1.1 - May 21. 2006.
-Now SuperAdmin can log into other admins
v1.2 - Aug 04. 2006.
-Release of this hack for vB v3.6
v1.5 - Aug 29. 2006.
-Added option to easily go back to admin account
-Alert can be enabled/disabled
-Added "Product Version Checking"
-Only Admins allowed to use function can see "Login As" links
-Several code improvements
v1.6 - Sep 01. 2006.
-Fixed bug (error message at the top of "add new user" page)
-Fixed bug (uncached template)
v1.7 - Sep 05. 2006.
-Now only SuperAdmin can access settings where you choose which Admins can use the hack
-You can also set Admins who will be able to use other Admins accounts (only SuperAdmin can set this)
-Alert moved to navbar so it is now shown on any page to Admin who is logged in as someone else
v1.8 - Apr 23. 2007.
-"Last activity" not changed for target user when admin used account
-"Login As User" automatically hidden in your own account and if target user is admin and you have no permissions to login to admin accounts
-Admin not logged out from ACP when back to original account, except session expired regularly
-Added option to modify alert box CSS
-Many other code improvements and optimizations
-If you have older version of this hack installed please uninstall it before installing latest version or it will not work properly
v1.9.1 - Jul 23. 2007.
-Fixed bug (Security Exploit)
-Fixed bug ("login as user" doesn't work if you access user profile via last post info)
-"Go back" alert moved to header (for must of users there is no need to edit custom styles anymore)
-Now you can go back from banned user accounts without clearing cookies manually
v2.0 - Nov 08. 2007.
-New: Actions logged in Moderator Log
-Fixed bug where admins with primary usergroup different than 6 are not able to use hack
-Several minor bugs fixed
--You MUST uninstall older version before installing this one in order to get it working properly
v2.1 - May 03. 2008.
-Compatible with vBulletin 3.7
-Minor bugs fixed
v2.2 - Jun 23. 2008.
-Added option to disable logs
-Added option to switch to vB 3.6.x compatibility mode
-Fixed bug (session lost for target user when you go back to admin)
-Fixed bug (sessions lost for guests/bots when you login as another user)
-Made several compatibility improvements
v2.3 - Apr 11. 2009.
-Bug fix (non-Admins able to login to user accounts in some cases)
-Bug fix (Admin can not search product entries in ModLog by product ID)
-Bug fix (logging error if username contains special characters)
-Bug fix (Admin must be member of usergroup 6 to use product)
-Minor bugs fixed


Click INSTALL if you like this hack.

Download Now

Only licensed members can download files, Click Here for more information.

Screenshots

Click image for larger version

Name:	loginasuser.jpg
Views:	3468
Size:	25.0 KB
ID:	92196   Click image for larger version

Name:	edituser.jpg
Views:	2477
Size:	101.0 KB
ID:	92197   Click image for larger version

Name:	alert.jpg
Views:	2169
Size:	16.5 KB
ID:	92198   Click image for larger version

Name:	adminset.jpg
Views:	2176
Size:	32.6 KB
ID:	92199  

Click image for larger version

Name:	acp.jpg
Views:	1753
Size:	60.1 KB
ID:	92200  

Show Your Support

  • To receive notifications regarding updates -> Click to Mark as Installed.
  • If you like this modification support the author by donating.
  • This modification may not be copied, reproduced or published elsewhere without author's permission.
Similar Mod
Mod Developer Type Replies Last Post
Miscellaneous Hacks Cyb - Login To User Account Valter vBulletin 3.7 Add-ons 158 13 Aug 2014 14:54
Add-On Releases Cyb - Login To User Account Valter vBulletin 3.6 Add-ons 244 29 Nov 2009 13:14
Cyb - Login To User Account Valter vBulletin 3.5 Add-ons 23 14 Apr 2009 19:10

  #46  
Old 31 Mar 2009, 00:16
Valter Valter is offline
 
Join Date: Aug 2005
Originally Posted by Sweeks View Post
There is some form of security bug in this which allows even a guest to use it. If I could PM you I would let you experience the flaw as I dont wish to post it publically.

Now unless there is something wrong with how I have set this up then there definitely is a problem. The only users I have allowed to use this is two admin accounts, I dont understand how guests could use it.
Have you checked your ModLog for this product entries?

Feel free to report product to forum Staff so they can check it and move it to "Mod Graveyard" if they find such bug. Noone reported such issue before.

Check your settings and ensure that proper user IDs are added to the list of Admins. IDs should be separated with commas.
Reply With Quote
  #47  
Old 31 Mar 2009, 15:24
nascartr nascartr is offline
 
Join Date: Jun 2008
I tested with a regular member and a guest, I don't have the problem.
Reply With Quote
  #48  
Old 31 Mar 2009, 19:25
Sweeks's Avatar
Sweeks Sweeks is offline
 
Join Date: Jul 2008
There is no logs at all of the activity as it is a guest able to do this. All user ID's have been correct too. @ Nascartr, I have tested it myself on a friends board without the same problem. I am sure this wasnt possible on our board until lately. Could it be anything to do with not using the default memberinfo template?
________
FAMILY GUY DICUSSION

Last edited by Sweeks; 06 Apr 2011 at 12:50.
Reply With Quote
  #49  
Old 01 Apr 2009, 21:19
Wifey Wifey is offline
 
Join Date: Mar 2004
I got a vbulletin error page when I tried to log in to an account on my site. I went back to the main page and it was gone, and I was logged in as myself but it was telling me I was logged in as someone else. I haven't even opened this site yet and have maybe 4 other hacks total installed. Any idea?

Great hack, by the way -- I had it on my last board and it was very useful with helping out a user on their account without having them change their password to something generic and then changing it back.
Reply With Quote
  #50  
Old 01 Apr 2009, 21:59
Valter Valter is offline
 
Join Date: Aug 2005
Originally Posted by Sweeks View Post
Could it be anything to do with not using the default memberinfo template?
Nope. Even if you give them direct link to loginasuser script they will not be able to do that.
Originally Posted by Wifey View Post
I got a vbulletin error page when I tried to log in to an account on my site.
What error?

Try to clear forum cookies, then re-log-in to your account, then try to log-in as user.
Reply With Quote
  #51  
Old 02 Apr 2009, 05:25
padfoot007 padfoot007 is offline
 
Join Date: Feb 2009
DUDE...omg this is one of the most amazing and freaky plugin ever...<3 u
Reply With Quote
  #52  
Old 03 Apr 2009, 16:55
Sweeks's Avatar
Sweeks Sweeks is offline
 
Join Date: Jul 2008
Youve said this is impossible, well how come it is doing this on our board as a guest even after installing the plugin again?

[removed the link ] is exactly what can be used on our forum for some reason with this modification enabled. That is without link on profiles etc and only allowed for myself to use it in the options for this.
________
Mercedes-Benz W125 History

Last edited by Sweeks; 06 Apr 2011 at 12:50.
Reply With Quote
  #53  
Old 03 Apr 2009, 17:00
Sweeks's Avatar
Sweeks Sweeks is offline
 
Join Date: Jul 2008
Got it at last! This modification is not to blame and I apologise Cyb, I have just figured it out! Another mod is allowing this security risk to be open in conflict which I am reporting.
________
Mflb vaporizer

Last edited by Sweeks; 06 Apr 2011 at 12:51.
Reply With Quote
  #54  
Old 03 Apr 2009, 17:37
Sweeks's Avatar
Sweeks Sweeks is offline
 
Join Date: Jul 2008
Actually I take that back, it is still doing the same thing.

I have tested the flaw in IE8 but it doesnt work and only seems to work in FF. I have disabled all the modifications using usergroups and still get this problem. Also, our guest count drops to zero guests as soon as I attempt the trick, it resets our guests somehow.
________
Vaporizer Information

Last edited by Sweeks; 06 Apr 2011 at 12:52.
Reply With Quote
  #55  
Old 08 Apr 2009, 22:49
Brother Malachi Brother Malachi is offline
 
Join Date: Jun 2008
Real name: Nick
I didn't realize the logging was on by default and have now disabled it, but is there a way to get rid of the logs that are already in the database?
Reply With Quote
  #56  
Old 09 Apr 2009, 07:41
Phobos49 Phobos49 is offline
 
Join Date: Jan 2009
Originally Posted by Sweeks View Post
Youve said this is impossible, well how come it is doing this on our board as a guest even after installing the plugin again?

is exactly what can be used on our forum for some reason with this modification enabled. That is without link on profiles etc and only allowed for myself to use it in the options for this.
Damn, he is right!!!!

With this link I am able to login into any account at my forum I want to! Even wihthout being even logged in before!!!

How is this possible?!?!?! DANGEROUS!!!!!!

Last edited by Phobos49; 09 Apr 2009 at 08:06.
Reply With Quote
  #57  
Old 09 Apr 2009, 07:48
Brother Malachi Brother Malachi is offline
 
Join Date: Jun 2008
Real name: Nick
Sweeks, edit that link out.
Reply With Quote
  #58  
Old 09 Apr 2009, 07:53
Brother Malachi Brother Malachi is offline
 
Join Date: Jun 2008
Real name: Nick
And of course Cybernetec doesn't accept PMs. Unless he takes a look at the above within a day I'm going to PM one of the mods and have them move this to the mod graveyard.
Reply With Quote
  #59  
Old 09 Apr 2009, 08:08
Phobos49 Phobos49 is offline
 
Join Date: Jan 2009
I just edited my Quote so that the URL disappears.

Well, I'm a bit shocked... I never thought, that an AddOn could do things like that!
Reply With Quote
  #60  
Old 09 Apr 2009, 08:10
Brother Malachi Brother Malachi is offline
 
Join Date: Jun 2008
Real name: Nick
I PMed an admin to remove the other URL too.
Reply With Quote
Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Mod Options

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


New To Site? Need Help?

All times are GMT. The time now is 00:51.

Layout Options | Width: Wide Color: