Unmaintained Login as User 1.2.7

This update adds basic support for the UI.X styles, which change the way the moderator_bar template is included ...

It also fixes logging out as a user when you're logged in as a user that fails a general assert, or your IP fails an IP banned assert.

This includes the new tfa requirement assert.

This version fixes server errors when there is no session when an IP is logged.

Make template modification much less greedy, to improve compatibility with other add-ons.

• Block the logout function if logged in as another user
• Block logging in as the base user if using the switch user function when already logged in as another user
• Show the base user in the 'Revert User' link
• Stop last activity updating when logging in as user
• Modified phrases

Remove the old route prefix from the XML.

Quick fix for the logging in as guest error.

This update adds moderator log support.

Whenever a member logs in as another user, it'll be added to the moderator log.

This update makes the following changes:

• Improve branding
• Update permissions (the permission ID's have changed, and must be reset)
• Change 'can't login as user' permission to an option
• Permission for sending conversation, instead of global yes/no
• Don't log IP to user being logged in to

• No longer uses external module, saves existing ID in session instead (much securer)
• Fixed bug when logging back into main account when logging in as guest
• Fixed bug where reason wouldn't be sent with the PM when logging out

It has come to my attention that this addon could allow an attacker to access the user account of anyone with permission to login as another user.

This urgent security update fixes this security issue.

I am not aware of any site affected by this security issue.

PLEASE UPDATE ASAP

Importing of the XML is not required, but is recommended to keep the version numbers accurate.

This update also sends the PM when the user logs out, not when you login as the user.