1.8x Why can users login to admin account and different accounts

Hello,

Well what's been happing is that users was logged in there normal account what they have singed up with, then they went to a topic then they went back to index page, they would of been on a staff account or a random, account out of the blue there been no MSQL injections or anything it's a fresh install with a plugin called newpoints and I was wondering what this could be?

Thanks

Never heard of this happening before apart from that time Omni fucked up on HF. Hope you find someone who can fix it for you.

Might be a caching issue?

29-05-2016, 09:50 PM

Jord Wrote: Never heard of this happening before apart from that time Omni fucked up on HF. Hope you find someone who can fix it for you.

I know very strange indeed.

29-05-2016, 09:54 PM

Faded Wrote: Might be a caching issue?

The cache path is fine on the site and onto the server, I did a reinstall of the server because I thought it was a server issue, then I did a reinstall of mybb and the same problem happens again, which is very wired.

29-05-2016, 10:01 PM

JMPRockFm Wrote:

29-05-2016, 09:50 PM

Jord Wrote: Never heard of this happening before apart from that time Omni fucked up on HF. Hope you find someone who can fix it for you.

I know very strange indeed.

29-05-2016, 09:54 PM

Faded Wrote: Might be a caching issue?

The cache path is fine on the site and onto the server, I did a reinstall of the server because I thought it was a server issue, then I did a reinstall of mybb and the same problem happens again, which is very wired.

PM me your forum url with a random account.

---

Didn't see anything out of the ordinary besides a PHP error:
Warning [2] Invalid argument supplied for foreach() - Line: 1214 - File: search.php PHP 5.5.35 (Linux)

Didn't see the issue that OP described either though.

Thank you for your help faded, I wounder what it could be then I cannot place my head around it hm..

Are you sure of this? Have you ever experienced this issue yourself?

The only problem I can think of is modification in the user's session. That is the only way an account can change.

If you are sure that this problem exists, it might be that someone has messed up with your copy of mybb. Best delete all files and do a fresh install and then connect the OLD db to the new installation.

30-05-2016, 01:22 PM

Sozin Wrote: Are you sure of this? Have you ever experienced this issue yourself?

The only problem I can think of is modification in the user's session. That is the only way an account can change.

If you are sure that this problem exists, it might be that someone has messed up with your copy of mybb. Best delete all files and do a fresh install and then connect the OLD db to the new installation.

Yeah I've experienced, it myself one time too I did a fresh install, same stuff happens, I even did a fresh install of WHM, and check there was no issues server side.

Then I reinstalled mybb, Then somebody tried to go on the forums who wasn't logged in to an account and then they were logged into a staff account who had access to the admincp but lucky the admincp had a pin then.

this is awkward
its a kind of magic?

well first time for everything i supose
try at mybb community, maybe some developer could assist you better, i dont know
good luck in solving it