Now, I just might have my site poorly configured (please let me know) but I just found a pretty easy way to cause some havoc on a drupal site. So lets say my default anonymous comment name is "Anonymous". This is the default Drupal setting afterall.

But now if someone comes along and creates a new user account with the name "Anonymous" then no one can post comments without logging in any more. Whenever you do, the drupal site just tells you that that user name is taken. Sure you can change the default name, but it isn't very usable.

Am I missing an obvious setting or should this be moved on over to a bug fix?

Comments

pwolanin’s picture

sounds like a bug to me.

---
Work: BioRAFT

pwolanin’s picture

submitted to the bug tracker: http://drupal.org/node/84674

---
Work: BioRAFT

AjK’s picture

Failed to reproduce this in 4.7 or 5? Said as much on the issue. If the original poster wants to add more info to the issue then please do.