From e69c5518577ea943555a03551b45aa059f1ff848 Mon Sep 17 00:00:00 2001
From: HB9HIL <fabian.berg@hb9hil.org>
Date: Fri, 16 Aug 2024 11:24:07 +0200
Subject: [PATCH] if the encryption_key is still the flossie thing you can't
 use the impersonate for security reasons

---
 application/controllers/User.php | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/application/controllers/User.php b/application/controllers/User.php
index 35d3e163d..5d5973e30 100644
--- a/application/controllers/User.php
+++ b/application/controllers/User.php
@@ -1165,6 +1165,11 @@ class User extends CI_Controller {
 
 	public function impersonate($hash) {
 
+		if ($this->config->item('encryption_key') == 'flossie1234555541') {
+			$this->session->set_flashdata('error', __("You currently can't impersonate another user. Please change the encryption_key in the config file first!"));
+			redirect('dashboard');
+		}
+
 		// Load the user model
 		$this->load->model('user_model');