I'm logged in as Administrator (User-ID=1).

If i change the username of another user (http://www.xy.com/user/4/edit?destination=admin%2Fuser%2Fuser) the alias of my logged in user (Administrator, User-Id 1) is changed. So the Administrator User is reaching via /users/CHANGED-USERNAME => user/1)

Thats a terrible bug :-/

Comments

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented

Yes, I believe this was introduced by http://drupal.org/node/193733

I guess we'll need to do some tricks with variable assignment or perhaps some better checking for whether $user exists (or just remove that and make securesite/core fix this bug).

greggles’s picture

greggles
he/him
Primary language English
Location Denver, Colorado, USA
commented
Status: Active » Fixed

Ok, I rolled that patch back for now. If you can help debugging in the other issue that would be great.

Anonymous’s picture

Anonymous (not verified) commented
Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for two weeks with no activity.