search

makinj / MeNext

Media request service with a hint of democracy!
MIT License
9 stars 2 forks source link

Empty login works on website #29

Closed JohnBehnke closed 9 years ago

JohnBehnke commented 9 years ago

Its possible to login on the website with an empty username and password

makinj commented 9 years ago

So we are aware of this issue The problem is that there is an actual user with no username or password in our database We have been debating deleting the user but it is actually pretty active

agundy commented 9 years ago

Do you think that that user might just be a bunch of random people exploiting the bug to not have to set up an account? Hence why it appears to be active?

makinj commented 9 years ago

this was resolved in 162893aceffcdbbbc46e579522f667ffbf2367b2