MyBB Community Forums

Hiya.


I was messing around with my newly updated 1.8 installation and found something strange with the "change username" option. found below.



You can change usernames, no problem, however things start getting weird when you set it to a large hex integer, like below.



I've changed my username to "0xF7EE2EB09FFFED1AD30A26A9E3D9".

Now stuff like this happens.





Not only that, but my account shows up as a guest,

Huh. That's one way to make yourself a guest and an administrator at the same time. I'm afraid to ask why you wanted to change your username to hexadecimal. At least it's an interesting bug and not a security issue (... yet). I wonder if there is an easy way to detect hexadecimal without being overbearing on username creativity or too difficult to implement a fix.

This is a known bug; https://github.com/mybb/mybb/issues/1933