Page 1 of 1
[VQMOD] Admin login bypass mod
Posted: Sat Apr 23, 2011 2:18 am
by JAY6390
Hi there. This is a simple vQmod for any of you guys having issues logging into your OC. It creates a dropdown of all users created so you can choose one and login. No password is required! Ideal for those who need to reset their passwords but don't want to go editing database values etc
NOTE: THIS IS ONLY FOR TEMPORARY USE. IT'S TO BE DELETED ONCE YOU HAVE LOGGED IN OR YOU FACE POSSIBLE HACK ATTEMPTS
Screenshot:
All feedback is welcomed
Re: [VQMOD] Admin login bypass mod
Posted: Sat Apr 23, 2011 9:31 pm
by Brook
Jay,
I really like the idea behind this vQmod module. Great idea! I really need to have all my users enter a password, just seems much more secure. Can you make a vQmod module that does the same thing (allows users to select a user from a dropdown box) except all users when logging in have to enter a password, just like the original admin login screen?
Thank you
Re: [VQMOD] Admin login bypass mod
Posted: Sat Apr 23, 2011 9:48 pm
by Qphoria
As assumed, this looks to be confusing people as it confused me. As I undertstand it, this is meant to be a recovery script ONLY, not an everyday use script. But I think many people are thinking it is a dropdown username box as opposed to a text field. But that is a very bad idea because it cuts down the need to guess the username and they can simply bruteforce the password.
Either way it is important to note that this is a very insecure script designed only to assist in recovering access in the case you get locked out of admin and should be immediately removed after resetting the password. The description is fuzzy IMO.
Re: [VQMOD] Admin login bypass mod
Posted: Sat Apr 23, 2011 10:10 pm
by JAY6390
Hi Brook
As Qphoria has rightly pointed out this isn't for general logins, it's only designed to aid in getting back into your admin when you lose your credentials. I made it because of my other
admin password reset tool being so popular with people, and thought having a vQmod version would make it even easier since you just drop in this file, select the user and login, and can change your password yourself that way
Qphoria has also pointed out that having a listing of your usernames is highly insecure for general use, it's only there for those who need to log in as their user and can't remember their id, or for logging into another account to test what they can see etc in their admin screen
if you feel comfortable with that, then let me know and I'll tell you how you can do that (or release another vQmod for that purpose - with a big message saying how insecure it is

)
Re: [VQMOD] Admin login bypass mod
Posted: Sat Apr 23, 2011 10:14 pm
by Brook
Makes sense. Thank you Q and Jay for your replies.
Re: [VQMOD] Admin login bypass mod
Posted: Sun Jul 26, 2015 1:12 am
by sunsys
Will this vqmod work with oc-2.x.x.x or works just with oc-1.5.x.x.