Previous Thread
Next Thread
Print Thread
Hop To
#264864 05/24/2021 3:42 PM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
Hi
FYI
On version 7.5.5
One of my moderators reported below, I have personally seen once before a few years ago that I had a password same as him 123456789123456789
Don't know where it came from but I changed it. ruffly same story.
see the members feedback below it was today or yesterday

Quote
I had entered the preferences page to update some
Of my other options, in the password section was a series of dots, I just ignored them. When I saved the changes I made
My phone asked if I wanted to update the password, so I clicked yes. When I tried to login on my laptop with my normal password it wouldn’t do so. So I looked on my phone for the new saved password which had changed to 123456789123456789, logged in and then updated
My password with one I would want to use.

I’ve updated my preferences a few times and this has never happened before.

Last edited by Morgan; 05/24/2021 3:44 PM.

Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #264865 05/24/2021 3:51 PM
Joined: Jun 2006
Posts: 16,299
Likes: 116
UBB.threads Developer
UBB.threads Developer
Joined: Jun 2006
Posts: 16,299
Likes: 116
123456789123456789 is simply a placeholder on the changebasic and editbasic pages for the password field so that it appears populated; the changebasic and editbasic script pages ignore the password field when this value is present.

Code
	if ($ChosenPassword != "123456789123456789") {
		$changepassword = 1;
		$ChosenPassword = md5($ChosenPassword);
	}

It is odd that the system allowed the page to process the password change to this value as it's specifically coded to ignore that value.


I am a Web Development Contractor, I do not work for UBBCentral. I have provided free User to User Support since the beginning of these support forums.
Do you need Forum Install or Upgrade Services?
Forums: A Gardeners Forum, Scouters World
UBB.threads: UBBWiki, UBB Styles, UBB.Sitemaps
Longtime Supporter & Resident Post-A-Holic
VNC Web Services: Code Modifications, Upgrades, Styling, Coding Services, Disaster Recovery, and more!
1 member likes this: isaac
Morgan #264866 05/24/2021 4:00 PM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
Thanks for the reply,
Thought I should report it.


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php
Morgan #264867 05/24/2021 6:58 PM
Joined: Apr 2004
Posts: 1,945
Likes: 145
UBB.threads Developer
UBB.threads Developer
Joined: Apr 2004
Posts: 1,945
Likes: 145
This sounds like the password manager in your device/browser is asking if you wanted to update your stored password with the default pseudo password used in the form.

You had not changed the password form entry field, but you choose to allow your password manager to update.

Your password manager was not intelligent enough to notice that the form was pre-populated with a pseudo value. Your password manager only looked at what it had stored, and what the page was displaying, rather than looking to see if you actually changed values within the field.

By blindly clicking through your password manager's prompt and choosing "Yes. Please update the stored password.", it did exactly that. Your password manager updated the stored password, even though you never updated it with UBB.threads.


Current developer of UBB.threads PHP Forum Software
Current Release: UBBT 7.7.5 // Preview: UBBT 8.0.0
isaac @ id242.com // my forum @ CelicaHobby.com
Morgan #264869 05/25/2021 2:22 AM
Joined: Jun 2006
Posts: 987
Likes: 24
Old Hand
Old Hand
Joined: Jun 2006
Posts: 987
Likes: 24
Thanks I’ll pass on the info


Morgan Johansson
BritBike Forum
https://www.britbike.com/forums/ubbthreads.php

Link Copied to Clipboard
ShoutChat
Comment Guidelines: Do post respectful and insightful comments. Don't flame, hate, spam.
Recent Topics
Bots
by Outdoorking - 04/13/2024 5:08 PM
Can you add html to language files?
by Baldeagle - 04/07/2024 2:41 PM
Do I need to rebuild my database?
by Baldeagle - 04/07/2024 2:58 AM
This is not a bug, but a suggestion
by Baldeagle - 04/05/2024 11:25 PM
spam issues
by ECNet - 03/19/2024 11:45 PM
Who's Online Now
2 members (ahmed047, Nightcrawler), 615 guests, and 132 robots.
Key: Admin, Global Mod, Mod
Random Gallery Image
Latest Gallery Images
Los Angeles
Los Angeles
by isaac, August 6
3D Creations
3D Creations
by JAISP, December 30
Artistic structures
Artistic structures
by isaac, August 29
Stones
Stones
by isaac, August 19
Powered by UBB.threads™ PHP Forum Software 8.0.0
(Preview build 20230217)