[fixed] Case in/sensitive usernames

[kippesp]

This seems to be inconsistent. Registering a new username is not allowed when the case insensitive search returns a hit. But creating a new user (from the admin control panel) is allowed, from as far as I can tell, no matter what (i.e. I can make 2,3 ... 4 accounts with my username).

Should admins be able to create duplicate accounts? Or accounts that differ only in case?

Is this desired by others and I should just hack it out of my own system?

[Floris]

Several weeks ago I was transferring users from another board to this one, and added them manually. At a certain point I couldn't remember where I was, and I added the user .. nothing was wrong I thought, because no error when adding, .. then I noticed the user got added twice, so I just deleted one. My thoughts were 'how can I add one user twice?'. Even though I am the admin, would be nice to get a message : are you sure? .. this username is already in the database .. [yes will add] [no will cancel/rename]

I dont think this is a bug though. I also didn't bother to mention it when I run into this, because I had a short time limit on adding those users, so rather wanted to finish it.

[Joshua Clinard]

I would think there should be some sort of check so that this cannot happen. Because when you login, you can login with whatever case you want, as long as the characters are correct. I think this could be a security issue, and should be fixed as soon as possible.

[Freddie Bingham]

Um security issue? I don't think so.

I just put in a check for duplicate usernames when creating/editing users so you may wield you admin powers more freely now that you are safe from yourself creating the same user twice.