First of all I want to tell you why I'm positng it here instead keep it in UG or wherever I've found it (I don't remember the source of this bug :D).
I'm sick&tired of those acc stealing stories. Everyone is complaining about their stolen accounts, etc, etc. So I hope that BP will see this topic and fix their bug FAST! I also hope that now you'll know how it looks like and what to do to not lost your account.
I hate thieves (like [Only registered and activated users can see links. Click Here To Register...] so better don't take his stolen accounts) so I just want to expose everything I know about email bug.
So, how it works?
1. Log into your account.
2. Log into your account but on OTHER server (eg your main server is int1 so you need to login on de1)
3. Change acc data on main server.
4. Confirm your acc data change and make next step quickly!
5. Write new email on the second server (don't write password as confirmation!) and press OK then again OK. You should get info that email was changed.
This bug is old but as I heard it still works! I also hope that all I wrote here is without any mistake :)
Any questions?
I'm sick&tired of those acc stealing stories. Everyone is complaining about their stolen accounts, etc, etc. So I hope that BP will see this topic and fix their bug FAST! I also hope that now you'll know how it looks like and what to do to not lost your account.
I hate thieves (like [Only registered and activated users can see links. Click Here To Register...] so better don't take his stolen accounts) so I just want to expose everything I know about email bug.
So, how it works?
1. Log into your account.
2. Log into your account but on OTHER server (eg your main server is int1 so you need to login on de1)
3. Change acc data on main server.
4. Confirm your acc data change and make next step quickly!
5. Write new email on the second server (don't write password as confirmation!) and press OK then again OK. You should get info that email was changed.
This bug is old but as I heard it still works! I also hope that all I wrote here is without any mistake :)
Any questions?