Hi,
We have a login script that seems to have been working ok for a while now, however I have just noticed a strange error, if you login but the password is a different case than it should be, it still logs you in, just not as the user.
I.e.
If the correct username and password is: jbloggs/password
If you login with jbloggs/PASSWORD or jbloggs/PaSsWoRd it'll still log you in, but it won't pick up the user details. If you login with a totally different password say jbloggs/letmein, it fails, but why doesn't it fail all the other times? The password is MD5 encrypted.
Chers
Ben
