1

Topic: Administrator guest posts?

In my PunBB setup, the Administrator account is named "Admin". I recently discovered that users can post guest messages using "admin" as their name, although using similar names to any other registered user will result in the usual "user too similar" error.

Is this behaviour normal? How can I prevent it?

Thanks!

Re: Administrator guest posts?

No.
So, to verify:
- There is a user with the username Admin
- Guests can posts using the name Admin
?

A link to the forum would also be nice.

3 (edited by djace 2007-09-07 11:20)

Re: Administrator guest posts?

I wrote that waay too late last night without checking enough.

I thought PunBB wasn't case-sensitive, but, as it turns out, it is. At least on my 1.2.15 installation with an SQLite Database.

So, all users are affected by this. Guests can post with a registered username if they use another caps combination on the name.

What's wrong here?

4

Re: Administrator guest posts?

I see that in register.php, the SQL query performed to check against exactly this behaviour is converting to uppercase before comparing, but not in the equivalent post.php section.

5 (edited by e-axe 2007-09-07 12:34)

Re: Administrator guest posts?

@djace: yes, that could be the problem i think... did that change fix the problem?

http://nopaste.mytty.org/?pid=274

Re: Administrator guest posts?

Yup, that probably is the problem. It's fixed in 1.3 at least

7

Re: Administrator guest posts?

Yes, it worked smile

Thanks Smartys, e-axe.