[wp-trac] [WordPress Trac] #2968: WP lets two different users register with same user name

[WordPress Trac]

#2968: WP lets two different users register with same user name
----------------------------+-----------------------------------------------
 Reporter:  RuddO           |       Owner:  anonymous
     Type:  defect          |      Status:  new      
 Priority:  high            |   Milestone:           
Component:  Administration  |     Version:  2.0.3    
 Severity:  critical        |    Keywords:           
----------------------------+-----------------------------------------------
 Thiss can't possibly be happening!  I haven't determined yet if this lets
 users log in with, say, full admin privileges, but today I awoke hungover
 to discover this (RFC822):

 -------------------------------------------------

 {{{

 Return-Path: <apache at amauta2.propagation.net>
 Received: from amauta2.propagation.net (localhost [127.0.0.1]) by
         amauta2.propagation.net (8.13.7/8.13.4) with ESMTP id
 k6MAhgEC003481 for
         <rudd-o at rudd-o.com>; Sat, 22 Jul 2006 05:43:42 -0500
 Received: (from apache at localhost) by amauta2.propagation.net
         (8.13.7/8.13.7/Submit) id k6MAhg5I003480; Sat, 22 Jul 2006
 05:43:42 -0500
 Date: Sat, 22 Jul 2006 05:43:42 -0500
 Message-Id: <200607221043.k6MAhg5I003480 at amauta2.propagation.net>
 To: rudd-o at rudd-o.com
 Subject: [Rudd-O] New User Registration
 MIME-Version: 1.0
 From: wordpress at rudd-o.com
 Content-Type: text/plain; charset="utf-8"
 X-Virus-Scanned: ClamAV 0.88.3/1614/Fri Jul 21 15:27:38 2006 on
         amauta2.propagation.net
 X-Virus-Status: Clean
 X-Spam-Checker-Version: SpamAssassin 3.0.6 (2005-12-07) on
         amauta2.propagation.net
 X-Spam-Level:
 X-Spam-Status: No, score=-5.1 required=5.0 tests=ALL_TRUSTED,AWL,BAYES_00,
         NO_REAL_NAME autolearn=ham version=3.0.6
 Status: O
 X-UID: 15194
 Content-Length: 89
 X-Keywords:

 X-Evolution-Source: imap://rudd-o@rudd-o.com/


 New user registration on your blog Rudd-O:

 Username:  Rudd-O

 E-mail: kanarxp at yahoo.gr

 }}}

 ------------------------------------------------------

 OMIGOD!  Why?  This shouldn't be possible at ALL!

-- 
Ticket URL: <http://trac.wordpress.org/ticket/2968>
WordPress Trac <http://wordpress.org/>
WordPress blogging software