diff --git a/README.md b/README.md index 6192448..5366adb 100644 --- a/README.md +++ b/README.md @@ -9,7 +9,7 @@ A component that stores the current authentication session and creates new session for impersonating Users. User can revert back to original authentication sessions without the need to re-login. ### Warning -Always double check that you cannot "spoof" other users in the controller actions. To prevent hijacking of users accounts that the current authenticated User shouldn't/wouldn't have normal access to. This Plugin does circumvent default authentication mechanisms. +Always double check that an attacker cannot "spoof" other Users in the controller actions. To prevent hijacking of users accounts that the current request shouldn't/wouldn't have normal access to. This Plugin does circumvent default authentication mechanisms. # Requirement 1. CakePHP 3.7 and above. @@ -34,7 +34,7 @@ $this->loadComponent('CakeImpersonate.Impersonate'); # Usage #### Impersonate user ```php -$this->Impersonate->login($user_id); +$this->Impersonate->login($userIdToImpersonate); ``` #### Check current user is impersonated