Admin Can Login as Any User
Author Message
After activation, this adds two option to user profiles, only visible to administrators:
  • Login as this user
  • Force logout
The first allows the administrator to effectively login to the account without the user's password.  Everything behaves normally in this login state.  The only difference is that logging out will return the administrator back to their original account.
(note, please don't use this to log into another administrator's account, and then log into some other account from there, though I haven't tried what happens if you do this)

The second option just forces the user to log out if they have logged in somewhere.

Alternative version: Login As by burnacid
(This post was last modified: 06-05-2018 09:30 AM by ZiNgA BuRgA.)
Find all posts by this user
Quote this message in a reply
Download: admhijack.php (3.68 KB)
Plugin Version: 1.2
Last Updated: 11-02-2011, 10:09 PM

Downloads: 4,305
MyBB Compatibility: 1.2.x, 1.4.x, 1.6.x, 1.8.x
Uploader: ZiNgA BuRgA
Mike55 Offline
Junior Member
**
Posts: 1
Joined: Dec 2013
Post: #71
RE: Admin Can Login as Any User
Hey all.
I'm new to mybb, just playing around with setting up a site.
Installed this plugin, and it's GREAT!
Works just like it should.
Using for purpose intended...to check permissions with tester account. Nice to not need to log out, then into Tester, then back to my account.
Super.
Thanks.
12-25-2013 02:48 AM
Find all posts by this user Quote this message in a reply
Jerry Offline
Junior Member
**
Posts: 2
Joined: Feb 2015
Post: #72
RE: Admin Can Login as Any User
Hi Yumi,

PHP Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
function admhijack_login()
{
	global $mybb,$admhijack_config;
	if(
		(
			(
				# User is not a root user
				$mybb->usergroup['cancp'] != 'yes' && $mybb->usergroup['cancp'] != 1
			)&&(
				# configuration NOT set
				!isset($admhijack_config['leader_group'])
				# Not a leader
				|| $admhijack_config['leader_group'] != $mybb->user['usergroup']
				# No Staff for this leader
				|| !$admhijack_config['have_staff']
				# Leader trying to become admin
				|| !$mybb->input['uid']
				|| !$admhijack_config['admin_upto']
				|| $mybb->input['uid'] <= $admhijack_config['admin_upto']
			)
		)
		|| $mybb->input['do'] != 'hijack'
		|| !$mybb->input['uid']
	){return;}


I am experimenting with the above changes and it is working, how ever I would like your review on this, this is for a big forum, I don't want some one to get unauthorized access.
Thanks

02-08-2015 04:54 AM
Find all posts by this user Quote this message in a reply
ZiNgA BuRgA Offline
Fag
*******
Posts: 3,357
Joined: Jan 2008
Post: #73
RE: Admin Can Login as Any User
Well, all it is, is logic, so if that all makes sense to you, I don't see what there's to review.
Your 'uid <= upto' check is interesting, and potentially problematic.

But otherwise, I don't see why you'd grant non-admins the ability to log into other accounts, so I can't provide any advice from my understanding.

My Blog
02-09-2015 05:30 PM
Find all posts by this user Quote this message in a reply
Jerry Offline
Junior Member
**
Posts: 2
Joined: Feb 2015
Post: #74
RE: Admin Can Login as Any User
Thanks Yumi for replying, uid <= upto are my own uids, (say upto first 20 users) created to become leaders, but not admin.
02-10-2015 02:56 AM
Find all posts by this user Quote this message in a reply
kel Offline
Junior Member
**
Posts: 3
Joined: Jun 2015
Post: #75
RE: Admin Can Login as Any User
Is this still maintained?

I cannot get this working with MyBB 1.6.17

Any suggestions or alternatives?

When activated I get no additional options under users profiles, though it installs fine.
If I use the function mod posted earlier I get an error on line 15 until the addon is removed.
06-19-2015 06:45 AM
Find all posts by this user Quote this message in a reply
ZiNgA BuRgA Offline
Fag
*******
Posts: 3,357
Joined: Jan 2008
Post: #76
RE: Admin Can Login as Any User
Check that {$modoptions} exists in your member_profile template.

My Blog
06-19-2015 10:26 AM
Find all posts by this user Quote this message in a reply
Sama34 Offline
Senior Member
****
Posts: 490
Joined: May 2011
Post: #77
RE: Admin Can Login as Any User
IIRC this will not work if the admin links are to be hidden (config.php).

Support PM's will be ignored. Yipi
Plugins: Announcement Bars - Custom Reputation - Mark PM As Unread
06-21-2015 11:00 AM
Visit this user's website Find all posts by this user Quote this message in a reply
metulburr Offline
Junior Member
**
Posts: 6
Joined: Oct 2015
Post: #78
RE: Admin Can Login as Any User
How would you only show the login link to profiles with less than X posts? Basically so if the magic number was 100 posts, admins cannot login to an account with more than 100 posts.
11-15-2016 11:19 AM
Find all posts by this user Quote this message in a reply
ZiNgA BuRgA Offline
Fag
*******
Posts: 3,357
Joined: Jan 2008
Post: #79
RE: Admin Can Login as Any User
You could use a template conditional to do that, but a clever admin could probably work around it.

You'd need to explicitly change the plugin otherwise, if that's what you wanted.

My Blog
04-02-2017 06:17 PM
Find all posts by this user Quote this message in a reply
Verilog Offline
Member
***
Posts: 50
Joined: Nov 2013
Post: #80
RE: Admin Can Login as Any User
Does this plugin work with MyBB 1.8 ?
09-19-2017 06:12 AM
Find all posts by this user Quote this message in a reply


Forum Jump: