log in is a wordpress issue, bbpress just uses the wordpress login
when you say ‘being logged in as a different user.’ is this logging in as user ‘a’ and getting user ‘b’, or on entering the site being already logged in as user ‘b’.
I queried it with the user and got the below response:
“Sometimes when I go into the forum, it has my old username in the log in boxes. That was the case yesterday, as I went in to show a friend, but I didn’t actually log in then. I then went back to it later, just before I sent you the e-mail, and afterwards logged out and logged in again as [username deleted]. When I go onto your site, it’s always through an icon which is there when I open a new tab in my browser, like all the others, bookmakers, Matchbook etc. I think that might be a bookmark, but I’m not sure.”
Does that clarify anything at your end?
it has my old username in the log in boxes
this is a setting/saving on her browser, nothing to do with the site.
But she was logged in as another user. Not her old or new username. This has happened twice both times different users, not her old or new username.
that’s not what the text you quoted says – she states that it is an old username.
Anyway this is a wordpress not bbpress issue, and is highly likely that it is user pc/browser/cookie/remember me issue.
Wordpress powers 10% of the internet, if this happened then it would be a major security issue for the whole of the internet 🙂
The text was a reply, when I asked if used bookmarks to log in or if she did anything different when logging in.
The user has now sent me two screenshots where I can see she is logged in as a different users, again neither her old or new username.
So I would say it is a BBpress issue.
bbpress just uses wordpress login, so at best this is a wordpress issue, so suggest you log it there
Welcome to the WordPress.org support forums
I have queried this in with the WordPress support and as expected they say it is a BBpress issue.
So who is right?
it is highly likely that it is user pc/browser/cookie/remember me issue.
But how can any of those lead to being logged into another users account for which this specific user has no access rights nor password (twice)? One of the accounts this user got access to was an account created by one of my administrators.
I cannot say – that would require access to your sites files, database and admin, and I suspect your users PC – and well beyond any free help.
all I can say is that wordpress is used on 74 million sites, and bbpress just uses wordpress logon, nothing more.
So you have never heard of a similar situation before?