Create an account

Very important

  • To access the important data of the forums, you must be active in each forum and especially in the leaks and database leaks section, send data and after sending the data and activity, data and important content will be opened and visible for you.
  • You will only see chat messages from people who are at or below your level.
  • More than 500,000 database leaks and millions of account leaks are waiting for you, so access and view with more activity.
  • Many important data are inactive and inaccessible for you, so open them with activity. (This will be done automatically)


Thread Rating:
  • 712 Vote(s) - 3.53 Average
  • 1
  • 2
  • 3
  • 4
  • 5
In WHMCS user can login with every wrong or right password

#1
I was trying to create a hook to query an external source when a user does not exist:

add_hook("ClientLoginShare",1,"hook_login_user_from_ldap");

Then I removed that piece of code (Now it's the original whmcs without any modifications).

But now whatever password I enter for a user, it logs in! How can this be and what I'm supposed to do?

The records for the users in db seem to be correct and untouched:

email: [email protected]
password: fdc586a75dabee47810667b735a85e25:%cidv
(original password: abc1235)
Reply

#2
OK, I found out when this occurs. When an admin is logged in at the same session from admin panel, every user with every password can log in from the user panel!

I don't know why this happens, but now at least I can avoid it.
Reply



Forum Jump:


Users browsing this thread:
2 Guest(s)

©0Day  2016 - 2023 | All Rights Reserved.  Made with    for the community. Connected through