Bug #25612
openCompromised Accounts?
0%
Description
Hi All,
I was searching for someone and saw this weird, long name come up multiple times in the people directory (all under my search for "walker").
Name in directory:
James John Robert Michael William David Richard Charles Joseph Thomas Christopher Daniel Paul Mark Donald George Kenneth Steven Edward Brian Ronald Anthony Kevin Jason Matthew Gary Timothy Jose Larry Jeffrey Frank Scott Eric Stephen Andrew Raymond Gr
Usernames associated
https://commons.gc.cuny.edu/members/vawsagqo/
https://commons.gc.cuny.edu/members/fexenuvm/
https://commons.gc.cuny.edu/members/hypercopado/
See screenshots
When I click the link to go to the profile for any of them I get "Page not Found" - so maybe you have already deleted these accounts? But wanted to report they are still appearing in search of people directory.
Files
Updated by Boone Gorges 3 days ago
- Status changed from New to Staged for Production Release
- Target version set to 2.7.12
These users have consecutive IDs 1252, 1253, 1254. They were created on 2010-09-03, and they were marked as spam, presumably a long time ago.
Looking more closely at your description and screenshots, the key point is that you were searching. We have some custom logic that we use when searching the member directory (to help us match against custom fields that BP's search functionality doesn't know about). This custom logic doesn't say anything about user status, so it was pulling up these users even though they're marked as spam. I've made a change in https://github.com/cuny-academic-commons/cac/commit/903ccc38e6f8a10d7b6a07a06574aef021c7bac4 to fix this. It'll be part of the next maintenance release. In the meantime, you can safely ignore.
Updated by Laurie Hurson about 13 hours ago
sounds good. thanks for investigating.