Problem with account ID contain the * sign

[Lescrocs]

Hello,
I have a big problem with a large number of members.
Some members are logging in with their login, but they are seeing information from other accounts.
I have a lot of members who log in with their login name, but they see the information of other members.

And sometimes my account is modified by some members. I have the impression that this happens with accounts that contain * in their login.

[mbrsolution]

Hi, this might be related to a cache issue. Do you have a cache plugin installed in your site? Does your server run any caching system?

The following documentation can also help with login related issues.

https://simple-membership-plugin.com/forums/topic/common-reasons-for-member-login-related-issues/

Regards.

[Lescrocs]

Hi,
Okay, I’ll try to see all the recommendations.

But regarding the bug of members logging in on other members’ profiles, this has been happening for over a year (since the beginning) because of accounts with a * in the username. And there was no cache at that time.

[admin]

A user cannot log into another user’s account. That’s just not possible. The issue is related to some kind of caching.

Please note that your hosting provider can also apply caching to your site without you knowing about it. This normally happens for shared hosting.

The following is what causes the issue:

The membership functionality needs a dynamic page being shown to the members. A cached page simply shows a static cached page (our plugin doesn’t get a chance to apply the conditions to that page). When a cached page is being shown, the user is not actually being shown a page which can read the login status of the user then show/hide the page’s content accordingly. That’s what causes the issue with membership type setup because membership type site is not the same as a blog type site. Caching is normally fine with a Blog type site where there is no need to show content based on a member’s login status.

[Lescrocs]

Hi,
” A user cannot log into another user’s account. That’s just not possible. ”

Ok, but many subscriber say me this probleme and show picture of their account, with bad username…

and again this morning, a member have change my account (administrator) i don’t know how they do it. but the member can do it this have a * in username or displayname. my account change usermeta ” administrator to subscriber” and change name, display name…

We have 76000 members, and many account have * in displayname

[Lescrocs]

i come back…

the probleme is…
when a user create an account if he insert * in the username, the account isn’t created, it take my account (id = 1) and remplace my informations and acces.

No new account is created with username, email…

i have 484 account with this probleme…

TY for your help

[Author]

Posts