Slight login/cookie bug

Posted: Sat Nov 10, 2007 3:09 pm

While reading the forums at: [ Only registered users can see links on this board! Get registered or login! ]

I came across this post from Griffinsbridge: [ Only registered users can see links on this board! Get registered or login! ]

I tried it out on my RN 2.10.01 site and it is possible to login with 1 or more spaces after the username. I'm not sure if it is exploitable, but I did find that after logging in and being redirected to Your Account the Avatar is displaying, but none of the icons are showing for Your Info, Your Home, Comments etc are displaying.

If you go to another page and then back to Your Account everything appears fine.

Posted: Sat Nov 10, 2007 4:12 pm

Just remembered the site I was testing on is running AM Lite, but checked on RavenNuke.com and I get the same results.

The suggested fix by Griffinsbridge seems to fix the bug. Very Happy

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

If you haven't already, please create a Mantis report.

Update - I already added it to svn - Thanks!