Suspended user login attempts show up in "Online Users" list
Bug #1284869 reported by
Aaron Wells
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mahara |
Fix Released
|
Medium
|
Aaron Wells | ||
1.8 |
Fix Released
|
Medium
|
Aaron Wells |
Bug Description
When a suspended user attempts to log in, if they enter their password correctly they see a message telling them they've been suspended, and the suspension reason the admin entered. They're also immediately logged out.
The bug is that this unsuccessful login attempt updates their "lastlogin" and "lastaccess" database fields. And that makes them show up in the "Online Users" sideblock, even though they shouldn't show up because they're not able to get in and do anything in the site.
Changed in mahara: | |
milestone: | none → 1.8.2 |
status: | New → Confirmed |
description: | updated |
no longer affects: | mahara/1.7 |
no longer affects: | mahara/1.6 |
Changed in mahara: | |
status: | Fix Committed → Fix Released |
no longer affects: | mahara/1.9 |
To post a comment you must log in.
Patch for "master" branch: https:/ /reviews. mahara. org/3045