Jump to content

Login feature still visible even when being logged in


Jock3r
 Share

Recommended Posts

Hello,

I am using IPS 4.4.10 and I have noticed that you can still visit and see the login page even though I am already logged into my account. I believe that this should not be possible? Like make a check that checks if the user is already logged and if they are to display an error.

Edited by Jock3r
Link to comment
Share on other sites

Well, I am using a plugin that adds recaptcha on login page. That specific page that is visible when not being logged has the recaptcha, on the other hand the one when you are logged in does not have it, therefore it's a security risk.

Link to comment
Share on other sites

2 minutes ago, Jock3r said:

Well, I am using a plugin that adds recaptcha on login page. That specific page that is visible when not being logged has the recaptcha, on the other hand the one when you are logged in does not have it, therefore it's a security risk.

How is that a security risk if they have already passed recaptcha and logged in?

Link to comment
Share on other sites

I would suggest you should update your plugin then? What you are saying is you wrote a plugin that changes how the login page works, however once someone logs in your plugin is no longer doing that. That's not really a deficiency in the core software release.

Link to comment
Share on other sites

Well, that was mostly because I wasn't aware that such a thing happened. I will push an update myself then, but still believe that this shouldn't be possible from IPS side. Just letting people know.

Edited by Jock3r
Link to comment
Share on other sites

 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...