Inactive user logged in - I'm soooo confused

Snokenfeldt · Post by **Snokenfeldt** » Sun Jan 10, 2021 11:59 pm

I recently migrated from phpBB2 to 3.3 and this really puzzles me...

There is an inactive user who is regularly logged in.

When I'm not logged in myself and click on the user it says "This user does not exist".

However, if I'm logged in and click on the user I can see the users profile which says: "User is inactive: Newly registered account"

The user joined on 17 Dec and has zero posts. What is going on here, can inactive users be logged in?

Lumpy Burgertushie · Post by **Lumpy Burgertushie** » Mon Jan 11, 2021 3:07 am

just guessing here, you see the inactive user when logged in because you are admin/moderator and can see the registered users that you have not activated yet.

when you are not logged in , you are a guest like any other guest and can not see those things that only admins and/or moderators can see.

robert

Post by **KevC** » Mon Jan 11, 2021 11:43 am

Snokenfeldt wrote: ↑
Sun Jan 10, 2021 11:59 pm
There is an inactive user who is regularly logged in.

Those two things are conflicting. If they're inactive (i.e. the account is marked as inactive) then it has never been activated and the user cannot be logged in.

Where are you seeing them 'logged in'?

Snokenfeldt · Post by **Snokenfeldt** » Tue Jan 12, 2021 10:18 am

KevC wrote: ↑
Mon Jan 11, 2021 11:43 am

Snokenfeldt wrote: ↑
Sun Jan 10, 2021 11:59 pm
There is an inactive user who is regularly logged in.
Those two things are conflicting. If they're inactive (i.e. the account is marked as inactive) then it has never been activated and the user cannot be logged in.

Where are you seeing them 'logged in'?

Yes, surely seems conflicting to me. This user was visible in "Who is online". If I was logged in as admin I could click the user to check the profile, but if I logged out and clicked the user it said "This user does not exist". The user was also listed under "Inactive users" in admin.

I didn't know what to do so I just deleted the user. The question is how this could be possible though.

Post by **KevC** » Tue Jan 12, 2021 10:29 am

It's not possible to activate and deactivate yourself in a standard installation.
It's a pity you've now deleted it as we can't see it to check if you're actually seeing what you think you are.

You'll just have to keep an eye out for another one.

Snokenfeldt · Post by **Snokenfeldt** » Tue Jan 12, 2021 10:55 am

This was a fresh migration from phpBB2.

Before migrating I wanted to force password change for all users, so I looped this SQL on the phpBB2 database:

Code: Select all

UPDATE phpbb_users SET user_password = ".md5($random_password)

Could that have caused some trouble with the inactive users?

I've attached a screenshot of what the profile looked like.

advertisements