php - What is the easiest/most secure way to allow admins to become other users -
i have control panel allows admins enter in search criteria user moderation purposes. afraid admit on here due backlashing surely receive, on page admins can users passwords, can sign in them moderation purposes. before tear me new one, let me finished hashing everyones password sha1
, unique salt!
that being said. want allow admins able "become" user or login user choose.
i looking easiest secure method on how this. please let me know information may need me able better answer question.
thanks in advance.
i did when designed high school site. allowed staff "proxy" in user. however, enter username, , emulate session user. never access password @ point.
i had $user
object , $session
object. $user
stored active user, , $session
stored actual logged in user. normally, same, if user proxied in user, $user->username
not equal $session->username
, allow me display banner said "you proxied in user, resume session, click here"
Comments
Post a Comment