Terrible mistake in Multi Users Plugin

[nguyentriquang]

Today i found a serious security mistake in the Multi Users Plugin. After you creat a new user as a Mod with limit permission, you login by the new user account and you absolutely can delete the ADMIN account in the User management. Really terrible. I fixed it with my way. But you guys can find and fix it in your way. Hope the core team solve this problem when integrate the plugin in new core.

Btw, when new version of 3.4 will be released? I am exciting to see what new.

Thank you

[dryland404]

no response on this ?

[Oleg06]

no response on this ?

Any newly created user can be assigned different rights.
https://prnt.sc/1xeov5p

[Tyblitz]

Unfortunately this plugin has been unmaintained for 10+ years and the author is no longer active.
I created a PR on Github 6 years ago to address some of the issues and it's still open: https://github.com/mikehenken/Multi-User/pull/3
Have you tried the forked version MultiUser 1.9.x? It's in the ZIP attached to this post: http://get-simple.info/forums/showthread...8#pid49838


Finally, I created gs_usermgr which has support for groups, permissions and roles, and works very well, but it has no UI (you have to manually update the XML files) so I never uploaded it to GS Extend.
Here is the forum thread: http://get-simple.info/forums/showthread.php?tid=9508
Here is the very detailed Github docs: https://github.com/webketje/gs_usermgr/wiki
And the download: https://github.com/webketje/gs_usermgr/a...master.zip

[johnywhy]

Unfortunately this plugin has been unmaintained for 10+ years and the author is no longer active.

Massive also has issues (confused by case in username). 

I see the following when i create a user with Multi User on GS CE, with debug enabled:

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "users_name" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]144[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "users_bio" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]146[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Deprecated[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: DOMDocument::createCDATASection(): Passing null to parameter #1 ($data) of type string is deprecated in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/admin/inc/basic.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]220[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Pages" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]148[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Files" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]149[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Theme" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]150[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Plugins" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]151[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Backups" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]152[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Settings" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]153[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Support" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]154[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Edit" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]155[/font]

[font=Arial, "Helvetica Neue", Helvetica, sans-serif]Warning[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]: Undefined array key "Admin" in [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]/home/booma/gsce.bayviewboom.org/plugins/user-managment.php[/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif] on line [/font][font=Arial, "Helvetica Neue", Helvetica, sans-serif]157[/font]
[font=Arial, "Helvetica Neue", Helvetica, sans-serif]case Has Been Created.[/font]