Still on Drupal 7? Security support for Drupal 7 ended on 5 January 2025. Please visit our Drupal 7 End of Life resources page to review all of your options.
I had a page posted on one of my sites that had an error in an IF statement.
Instead of:
global $user;
if ($user->uid == 1) {
it had:
global $user;
if ($user->uid = 1) {
This is a bad thing, as it sets the uid of anyone who visits the page to the super user account.
The page was only live for a couple minutes, but I'm worried that some users may have visited it. If so, will they now have admin permissions? If so, for how long?
It seems to have disappeared from Contrib. The project page (http://drupal.org/project/themedev) throws an "access denied" message. Anyone know what gives?