Security hole

[samrad]

Hi we have an FAQ that is secured, however a user has discovered a way round this.

If you register for an account than request an email of your password the system sends you a password and then allows you to log in. You get an error on login but if you then click on registration again the system gives you the registration page in the FAQ body with all the links. It then lets you browse the faq without any account activation.

[samrad]

I have temporarily fixed this by adding: session_destroy();

Code: Select all

         $error           = $PMF_LANG['ad_auth_fail'] . ' (' . $faqusername . ')';
			session_destroy();
            $loginVisibility = '';
            $user            = null;
            $action          = 'main';

into index.php

[Thorsten]

Hi,

thanks for the hint, I'll add this fix.

bye
Thorsten