by axew3 » Tue Apr 07, 2020 1:42 pm
So i've just note a thing that could be been may predicted, but sometime it is not so easy to detect all.
This the problem:
the plugin code, recognize the User ID 1 in WordPress as user ID 2 in phpBB, despite may created with different usernames.
They are install admins.
BEWARE that in WordPress, if for example you created an username admin that is NOT the installer user WP user ID1, and in phpBB the installer user with ID2 is named admin, than it can lead to unpredictable results! It will not lead to security problems, but to messes on profile updates actions.
So just remember that if the username ID1 (installer) in wordpress, have not the same username of the UID2 (installer) in phpBB, you need to be sure that the username with UID2 in phpBB DO NOT EXIST INTO WORDPRESS!
If it already exists and you do not want to remove, then be sure it is under your control (to be sure about security 100%) and may activate the option that UNLINK userID1 in WP and phpBB userID2
Well may this will be added into documentation ADDED
So i've just note a thing that could be been may predicted, but sometime it is not so easy to detect all.
This the problem:
the plugin code, recognize the User ID 1 in WordPress as user ID 2 in phpBB, despite may created with different usernames.
They are install admins.
BEWARE that in WordPress, if for example you created an username [i]admin[/i] that is NOT the installer user [i]WP user ID1[/i], and in phpBB the installer user with ID2 is named [i]admin[/i], than it can lead to unpredictable results! It will not lead to security problems, but to messes on profile updates actions.
So just remember that if the [b]username ID1[/b] (installer) [b]in wordpress[/b], have not the same username of the UID2 (installer) in phpBB, you need to be sure that the [b]username[/b] with UID2 in phpBB [b]DO NOT EXIST INTO WORDPRESS![/b]
If it already exists and you do not want to remove, then be sure it is under your control (to be sure about security 100%) and may activate the option that UNLINK userID1 in WP and phpBB userID2
[strike]
Well may this will be added into documentation[/strike] ADDED