LoginOut.php bug

[pjbauer]

There is a bug in LoginOut.php

SMF adds a check against the user email (in case the user enters email instead of username when logging in). Then if this is found, the $_Request['user'] variable is not set to the actual username - it remains the email address!

This can cause havoc in everything that uses the $user var - like adding a new user with the email name as the username in other bridged components (i.e was Gallery2 for me) -and everything from "Who's Online" module to the adminstrator control panel will show the entered email address as the username!