UBB.Developers Forums UBB.threads 6 Bug Reports Bug in login

I searched for this here, and didn't find anything..so...thought I'd mention it.

The capitalization of your username when you login is set in the cookie/session, rather than what the registered username is.

IE, if I logged in as "sWaMPGaS", all my new posts would be from that capitalization.

The way I fixed it was to modify main.inc.php and change all occurances of "$Username" to "$CheckUser" in the start_page function after the SQL call to the user database to grab the registered user name.

WWWThreads user since 1999: www.zophar.net

This is one that's kind of been hanging around for a bit. The way you fixed it was how I was thinking of doing it. Nice work and thanks for the fix.

Well, another thing that concerns me is trusting hidden form data in the post.

You can't trust the username they provide...so how can you trust hidden form data that can be changed?

I haven't had time to review the code to see if it's verified before using it, but it certainly seems "iffy" to use data they provide (IP).

Incidently, I'm not sure who replied to my question I emailed to support@ (I think it was you), but I did figure out how to convert old v3.5 tables to v5.3 tables. Only took 6 hours and had 98% accuracy (some posts just didn't convert)...

Also, this gets rid of the "Can't Edit Post", "Can't Delete Post", "Can't see Edit Icon" bugs related to the case of the username not matching what was previously used.

Administrator, Videogame Music Archive

This is exactly what i was talknig about, this will solve several issues at once. Thanks for this!!

Jhariden (aka Strategist)
Stratics Forums

Did this include instances of $Username_q? I want to be sure I only change the right instances of $Username.

Jhariden (aka Strategist)
Stratics Forums