Hansi,

This is the wrong venue to seek recourse.

This is a valid function and very useful tool for Admins. There is no valid reason to remove it.

As a paying Customer of Infopop (sorry, I just cannot bring myself to type the “G” name), my vote is for it to stay.

For note, updating a user password is simple, especailly if PHPMyAdmin is installed on the server (which comes with most control panels now adays), there are MD5 password encoders everywhere, it'd in all honesty take 30 seconds to 2 minutes to update a user password; just as long as it woudl take to use the "login as this user" feature.

Well you could modify your own code and remove the feature too on your own.

yes, but I think he's saying that he's a member on a board where the admin is "abusing" this feature...

Well then as I said if he can't get the guy to stop and it bothers him enough then time to move on to another site. Not much else you can do if an Admin won't listen to you as typically he is the one that owns the board or is close to the person that does.

And also even if the feature was removed -- whats to stop that admin from coding it back in?

So if your on a site where the admin abuses you like this you just need to decide if you want to stay there.

Of course I don't wan't to stay, but you should be worried that your software is being used in a massive fraud, involving hundreds of thousands of pounds.

Hello Hansi

As with anything that is abused it should be reported to the proper authorities.

If you feel that what you're describing is fraud or illegal then you should report it to the local authorities where the site is being run from.

I empathize with you but your suggestion to modify the program because someone abuses it is not valid either.

I'm sorry but along the same lines. I DON'T agree that all guns should be outlawed from the public just because some idiots abuse it and kill others with it. The PERSON is the problem not the object.

This is what I was saying that he could just update the user password in the CP, it's a non-salted hash, so it'd be easy for any novice to update.

If this is a legal issue it should be brought up with the law in the established country; we are in no way lawyers or police, we simply modify and add to a codebase.