Some themes elevate guest to user

Posted: Sat Jan 08, 2005 6:34 pm

I found this code in a theme

Code:




if ($username == "") {


    $username = "Guest";


}

That was pretty cool because it gave anomynous the name Guest.
But... it also gave all anomynous users access to user level areas of the site.

I don't know if this is in other themes but I know it was in one I use.
Pretty obvious if you have it because you can visit restricted areas of your site without loggin in.

Site Admin/Owner Joined: Aug 27, 2002 Posts: 17088

All the ones I use have

Code:

    if ($username == "") {


        $username = "Anonymous";


    }

Worker Joined: Aug 06, 2004 Posts: 192

What file in the theme are these located?

Posted: Mon Jan 10, 2005 3:16 pm

Mine was in theme.php could have been something I did myself somewhere along the line. Anyway it wasn't a good thing either way.