MyBB Community Forums
[Rejected] Accessing lostpw and login page while signed in - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Development (https://community.mybb.com/forum-161.html)
+--- Forum: MyBB 1.8 Development (https://community.mybb.com/forum-165.html)
+---- Forum: 1.8 Bugs and Issues (https://community.mybb.com/forum-157.html)
+----- Forum: Rejected (https://community.mybb.com/forum-184.html)
+----- Thread: [Rejected] Accessing lostpw and login page while signed in (/thread-161140.html)



Accessing lostpw and login page while signed in - OmegaExtern - 2014-10-11

Hello.

I have found this kind of issue a while before, and today there is still nobody has fixed it yet.
In short, login to MyBB forum ( even here on community.mybb.com ), once you have logged in, locate the address bar of your web-browser and navigate to "./member.php?action=login" orĀ "/member.php?action=lostpw".
It is just no-sense; Why able to access these pages when logged/signed in already?
(Just abort the request if already logged/signed in or navigate to the previous page I guess)


RE: Accessing lostpw and login page while signed in - Destroy666 - 2014-10-11

(2014-10-11, 09:12 PM)OmegaExtern Wrote: /member.php?action=login

It allows you to log in as another user (hence the current username is displayed above the form). So there is nothing wrong...

(2014-10-11, 09:12 PM)OmegaExtern Wrote: /member.php?action=lostpw

If you're logged in, it doesn't mean you remember your password... Why? Tip: cookies. Also, you may want to send the recovery mail for someone else.

There are no problems caused by entering these links as a logged-in user, thus I'm rejecting this.