Logged out users can pretend to be authors

  • hi,

    I noticed something really strange. Whenever I comment on an article (not logged in) and use the same information as another author, HIS avatar is showing up as well!
    The comment does not have to be authorised as well, this really frustrates me. Everybody can now pretend to be one of the authors and ruin the blog.
    Is this a known bug? How do I fix it?

    Regards,
    Lourens

Viewing 7 replies - 1 through 7 (of 7 total)

  • and use the same information as another author,

    what do you mean by this?

    Thread Starter Lorrens

    (@lorrens)

    Well, this is the author’s info:
    Name: John
    e-mail: [email protected]
    website: https://john.company.com

    If you add this info in the right commentboxes and pretend that’s your own info, you’ll see John’s avatar next to your comment, and the comment doesn’t need approval by an admin!

    If you’re referring to Gravatars that’s how they work. They are tied to a specific email address.

    Thread Starter Lorrens

    (@lorrens)

    Not Gravatars, it’s a UserPhoto (plugin)

    ouch!
    I’ll try replicating this. I have several sites, so if it is some kind of bug – should be able to find out.

    More likely a cookie problem, though.
    what plugins are you using?

    Thread Starter Lorrens

    (@lorrens)

    Member access, UserPhoto and Profiler…
    I haven’t upgraded to 2.7 yet, I hoped they already fixed that bug..

    Can’t be a cookieproblem though, it was my home computer, and John (okay, fake name ?? never logged in there…

    If you’d like I can send you an e-mail (couldn’t find a PM-option here) with instructions how to reproduce the problem?

    ok – send the email
    I have tried replicating it on 3 sites with 2.7 and 2 sites with 2.8 -bleeding-edge with no luck
    sbollinger at comeuphither dot com

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Logged out users can pretend to be authors’ is closed to new replies.