News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

You will need to enter your (current) password to make changes, unless admin?

Started by ApplianceJunk, October 25, 2014, 08:55:00 PM

Previous topic - Next topic

ApplianceJunk

As admin when I go to my profile setting to change my password it says near the top of the page...
Quote

These are your account settings. This page holds all critical information that identifies you on this forum. For security reasons, you will need to enter your (current) password to make changes to this information.


Even though it says I will need to enter my current password to make change I do not. I don't even see the text box asking me for my current password. I can simply enter a new password and enter it a second time for confirmation.

But when I log in as a regular member and go to profile settings to change the password I do see the text box at the bottom of the page asking for the current password.

Is this how it should work or should I have to enter my current password even as admin to make changes to my profile settings such as changing the password?

Using SMF 2.0.8

Thanks,

LiroyvH

Hm no, I need to enter my password (as admin and as regular user) when updating my own profile.
When updating the profile of others, it doesn't ask for it. (Does ask you for your admin pass if you haven't entered it in a while.)

Afaik, that is how it should behave: rather than *not* asking it on your own profile, it's the only profile where it *must* ask it.
Are you sure you're looking at your own profile and haven't accidentally opened a member profile? :P
((U + C + I)x(10 − S)) / 20xAx1 / (1 − sin(F / 10))
President/CEO of Simple Machines - Server Manager
Please do not PM for support - anything else is usually OK.

ApplianceJunk

Ok, I just doubled check in different browsers and got the same results.

If I'm logged into my admin account I do not have to enter my current password on my account or any other members accounts. I don't even see the text box that ask for my current password as shown in the attachment.

If I log into our forum as a regular member then I see the text box asking for my current password on the profile settings page as shown in the attachment.

So it's just me with this problem then? I don't currently have a clean install of SMF to compare it too.

Arantor


ApplianceJunk

I do not have the check box selected for, "Disable administration security" so I guess the answer would be, no.

Arantor


ApplianceJunk

Yea, I just read the little help note and seen that checking it would seem to give the affect I'm experiencing.
I did go ahead and check it just to see if it would maybe have the opposite affect for some strange reason, but nothing changed so I went ahead and unchecked it again. Checked a second time after checking and unchecking the box, but still no change.

JBlaze

Do you have any admin-related mods? Just a hunch, but it sounds like something a SuperUser mod would do. I can't replicate this issue on a standard SMF install, regardless of what buttons I press...
Jason Clemons
Former Team Member 2009 - 2012

ApplianceJunk

I don't see any thing in my mod list.
The only one I see that even says anything about admin is #48

Enable or Disable "« Last Edit: by »" for Administrators

I believe it's a mod that keeps "Last Edited by..." from being displayed when I edit a topic.
It's a mod I have been using almost since day one, ( 2007,2008? ) back before even SMF 2.0 I believe. Think I had someone fix it up years ago to work on 2.0 for me. Been so long ago don't remember for sure. Don't think it's even on the SMF mod site anymore.

Anyway here is the complete list of mods on my site.

1.   SMF 2.0.8 Update   1.0   [ Uninstall ]
2.   Tapatalk SMF 2.0 Plugin   4.0.1   [ Uninstall ]
3.   URL Popup   1.0.2   [ Uninstall ]
4.   Add IP2Location to Track IP   1.31   [ Uninstall ]
5.   Custom Copyright   1.0.4   [ Uninstall ]
6.   SMF 2.0.7 Update   1.0   [ Uninstall ]
7.   SMF 1.1.19 / 2.0.6 Update   1.0   [ Uninstall ]
8.   Simple Audio Video Embedder   2.1.1   [ Uninstall ]
9.   SMF 2.0.5 Update   1.0   [ Uninstall ]
10.   Social Login   2.3   [ Uninstall ]
11.   Add Facebook Like, Tweet, and Google +1   1.0.3a   [ Uninstall ]
12.   Add Social Media Icons To Profiles   1.0.8   [ Uninstall ]
13.   Enhanced About Page   0.02   [ Uninstall ]
14.   Register At Post View v.1.1   1.1   [ Uninstall ]
15.   Change All Subjects   1.1.2   [ Uninstall ]
16.   SMF 2.0.4 Update   1.0   [ Uninstall ]
17.   Country Flags   2.1   [ Uninstall ]
18.   Similar Topics   0.4   [ Uninstall ]
19.   Google Translate for SMF 2.0   1.3   [ Uninstall ]
20.   SMF Store   2.0.1   [ Uninstall ]
21.   SMF 2.0.3 Update   1.0   [ Uninstall ]
22.   Add Join Date to Post   1.0   [ Uninstall ]
23.   Repair Form   1.0   [ Uninstall ]
24.   Invitation Message In Your Face (IMIYF)   0.3.1   [ Uninstall ]
25.   Google Analytics Code   1.4   [ Uninstall ]
26.   SMF Links   2.5.3   [ Uninstall ]
27.   APP Tag for ApplianceJunk.com   1.0.0   [ Uninstall ]
28.   SMF Articles   2.0   [ Uninstall ]
29.   Google Member Map   2.6   [ Uninstall ]
30.   Additional Instant Messengers   1.0.1   [ Uninstall ]
31.   More Spiders   1.2   [ Uninstall ]
32.   GoogAd Mod v.1.4   1.3   [ Uninstall ]
33.   New Topic Button   1.0   [ Uninstall ]
34.   Guest Registration Notification   1.4.2   [ Uninstall ]
35.   SMF 2.0.2 Update   1.0   [ Uninstall ]
36.   Sitemap   2.2.0   [ Uninstall ]
37.   View Only Boards   1.2b   [ Uninstall ]
38.   reCAPTCHA for SMF   0.9.8a   [ Uninstall ]
39.   SMF 2.0.1 Update   1.0   [ Uninstall ]
40.   Online Users Area   1.2   [ Uninstall ]
41.   Show your social networks   3.0   [ Uninstall ]
42.   Contact Page   3.0   [ Uninstall ]
43.   PM to New Members   1.2   [ Uninstall ]
44.   Treasury   2.10   [ Uninstall ]
45.   Search Focus Dropdown   1.6.1   [ Uninstall ]
46.   Buy me a beer   1.0   [ Uninstall ]
47.   Internal Links Use Same Window   1.2   [ Uninstall ]
48.   Enable or Disable "« Last Edit: by »" for Administrators   1.3a   [ Uninstall ]
49.   SMF Gallery Lite   3.1.1   [ Uninstall ]
50.   Downloads System Pro   2.0.4a   [ Uninstall ]
51.   Ad Seller Pro   1.0.9   [ Uninstall ]



JBlaze

Interesting... don't see anything there could affect the password field...

Well, my hunch has been crushed lol
Jason Clemons
Former Team Member 2009 - 2012

Burke ♞ Knight

x
Quote from: Arantor on October 25, 2014, 10:23:06 PM
Do you have admin security disabled?

Strange... I have Admin Security disabled on my test site, yet when go to edit account settings, it still shows and requires me to enter my password.

ApplianceJunk

I'm a little concerned that what ever is causing this behavior maybe a security risk. At this point in time I have no idea what to do about it.

Maybe it's nothing to worry about, but I don't know. What do you think about it Arantor? 

vbgamer45

My guess would be Social Login since that might change how passwords work.
Community Suite for SMF - Take your forum to the next level built for SMF, Gallery,Store,Classifieds,Downloads,more!

SMFHacks.com -  Paid Modifications for SMF

Mods:
EzPortal - Portal System for SMF
SMF Gallery Pro
SMF Store SMF Classifieds Ad Seller Pro

Advertisement: