Thu, 25 Jan 2001 18:44:11 -0800
This could very well be. This database was brought over from Minivend 4.04
a few months ago. We are getting ready to launch a high traffic site next
week on an empty database so I'll keep an eye on it and post here if blank
users show up. Thanks.
----- Original Message -----
From: "Mike Heins" <email@example.com>
Sent: Thursday, January 25, 2001 6:28 PM
Subject: Re: [ic] security
> Quoting Ron Phipps (firstname.lastname@example.org):
> > Sonny,
> > I just had a client report that his users were able to login without
> > specifying a username and password. When they did it would pull up info
> > a person by the name of Kelly. I looked in the db and sure enough the
> > username field was blank. It appears that there is a bug somewher ein
> > accoutn creation routine that allows for this happen. We have not seen
> > this is done, jsut know that it can be done. Any ideas?
> This should have been fixed at 4.6.1....the username might have been
> prior to that, I suppose.
> I will put it back in the bug list if you can confirm it is still
> possible to create a blank username.
> Akopia, Inc., 131 Willow Lane, Floor 2, Oxford, OH 45056
> phone +1.513.523.7621 fax 7501 <email@example.com>
> Nature, to be commanded, must be obeyed. -- Francis Bacon
> Interchange-users mailing list