Jump to content
jason229

Problem with login

Recommended Posts

Hello everybody,

We use whmcs and one of client report us strange issue. All clients can log in in our system without password or even with wrong password. So, if the client has an account with us, he can log in easy without typing password or with wrong password. I am not PHP expert I saw on button press it runs dologin.php but I can not look into that as it is encrypted with ion. Any advice or point where I should look to solve this big issue.

Share this post


Link to post
Share on other sites

Hi Jason,

If you are logged in as an admin user, you are able to login as any client without a password, or with any password.

Try the same thing again in either an incognito window, or a different browser without an admin session and you will see that a password is required.

 

Andrew

Share this post


Link to post
Share on other sites

Hello. Tried ... it is same... I am not logged as admin at all. So the situation is weird... I can log in without a password or if it is the wrong password if I have email registered in whmcs...  Do not know where to look in code to try to find what makes this issue. Maybe some other advice?

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×

Important Information

By using this site, you agree to our Terms of Use & Guidelines and understand your posts will initially be pre-moderated