MyBB Community Forums

Full Version: Two different users with the same nicknames
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
May this be a bug?

Two different users with the same nicknames...

Please look at the image below...

berk_20020 (uid=4824)
berk_20020 (uid=4825)

[Image: nickszh2.png]



Also check the following board at www.eltcafe.net
Are you sure they don't have some hidden unicode characters in their username?
member.php

Find:
--------------
if($mybb->input['action'] == "do_register" && $mybb->request_method == "post")
{
--------------

Replace:
--------------
if($mybb->input['action'] == "do_register" && $mybb->request_method == "post")
{

///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
require_once MYBB_ROOT."inc/config.php";
$post_email = $_POST[email];
$post_email2 = $_POST[email2];
$post_username = $_POST[username];

if ($post_email != $post_email2) {

ECHO "Enter a valid email address.";
exit();
}
else {

$conn=mysql_connect($config[hostname], $config[username], $config[password]);
// mysql_query("SET NAMES 'utf8'");
mysql_select_db($config[database]) or die ("Unable to connect to MySQL");
// print "Connected to MySQL";
$list_query = "SELECT * FROM forum_users WHERE email=\"$post_email\" or username=\"$post_username\" ORDER BY uid DESC";
$result = mysql_query($list_query) or die("ERROR!");
$count = mysql_num_rows($result); //get the match number

if ( $count != 0) {
ECHO "That email address or username is already registered.";
exit();
}
}
/////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

--------------
^ How does that help the issue here?


Unfortunately, the only sure method for checking for hidden unicode characters is to save the page and investigate it in a hex editor.
I'm sure there aren't any hidden unicode characters in their username...
If you're certain that's the case, the only possibility I can think of is a concurrency issue.
I might look into this one.

But anyway, for now, just delete the second account.