Registration under same name as user 0
pwolanin - September 17, 2006 - 20:47
| Project: | Drupal |
| Version: | 5.x-dev |
| Component: | user system |
| Category: | bug report |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | won't fix |
Jump to:
Description
at http://drupal.org/node/82542
the following bug was reported by bryan kennedy:
I just found a pretty easy way to cause some havoc on a drupal site. So lets say my default anonymous comment name is "Anonymous". This is the default Drupal setting afterall.
But now if someone comes along and creates a new user account with the name "Anonymous" then no one can post comments without logging in any more. Whenever you do, the drupal site just tells you that that user name is taken. Sure you can change the default name, but it isn't very usable.
#1
This may exist as a bug in 4.7, but I tested this out on 5.0-beta1, and it seems to work around it w/o any problems. It says Anonymous for both users, but they can still both comment on stuff.
I kind of think that we ought to disallow anyone from registering under the same name as the anonymous user though, but then you also have disallow the anonymous user's title being changed to anything that is already registered. Is it worth it?
#2
I failed to reproduce this in 4.7 or DRUPAL-5
#3
I tried it out on the cvs, which is the version listed. I created an Anonymous account. I enabled forums. I enabled anonymous comment posting. I added an account named Anonymous. I tried to post anonymously. It worked fine.
I am setting this to "won't fix", since I am afraid to close. But, there seems to be nothing to fix.