[Fixed] Login Error? Security Breach?

Register an Account
Pligg Chat Room
Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 03-25-2007, 09:26 AM
Casual Pligger
 
Join Date: Mar 2007
Posts: 64
I am running Pligg 9.0 Beta, and I got this strange error.

I type in any username with another person's password, and viola, it logs in. I type a regular user's password into god, and it gives the login administrator power.

Has anyone found this to occur? I tried to search the forums for this, but could not find it. For obvious reasons, I'm not posting my site for everyone to try out, but let me know if anyone else has encountered this.

Last edited by acidride; 03-25-2007 at 09:48 AM.
Reply With Quote
  #2 (permalink)  
Old 03-25-2007, 10:51 AM
kbeeveer46's Avatar
Pligg Developer/Admin
Pligg Version: 0
Pligg Template: none
 
Join Date: Jun 2006
Location: Muncie, Indiana
Posts: 3,215
I wasn't able to reproduce this. Do you have a live site we can test with?
Reply With Quote
  #3 (permalink)  
Old 03-27-2007, 09:09 AM
Casual Pligger
 
Join Date: Mar 2007
Posts: 64
We've identified the problem. It seems that our import script we wrote for users did something weird to allow users to login with any password. I've disabled the import script and am trying to identify what changed. It doesn't affect anyone else. It's just us messing something up.
Reply With Quote
Reply

Thread Tools
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
Can't Register and Login Teri Questions and Comments 3 03-03-2010 04:21 AM
v9.6 Register Error during login action noyp Questions and Comments 7 10-08-2007 07:57 PM
Login URL redirection problem on IIS sameercdac Questions and Comments 2 04-02-2007 01:13 PM
[Fixed] Voting and login problems with latest build (702) silversow Questions and Comments 2 02-14-2007 04:13 AM


Pligg Modules and Pligg Templates from Pligg Pro Find support on the Pligg CMS Forum - 24 hours a day! Make a donation to support Pligg CMS development