CaliforniaCCW wrote:I did change the password. Nothing works. Once someone has an account, the admin has no way to control him from posting, other than going through and deleting his posts.
This is bad. I want to prevent a certain user from posting, or PMing. Honestly, this problem is a show-stopper critical bug in JForum. If the forum admin can't prevent a user from posting, then the admin has no control of the website. Why even bother to have passwords and users? Just let anyone post anything.
I would not recommend JForum to anyone until this is fixed. I regret using it but a) it's too late to switch and b) I don't know of any other forum software in Java.
CaliforniaCCW wrote:It does, indeed, log everyone off. And I put that guy's user ID in the ban list, locked his account, and changed his password. And he still is able to log in. Really, once someone has an account, that person can't be stopped, from what I can tell.
I am using Postgres as the DB. Is that a factor? Maybe there is a bug in one of the Postgres queries, where it is not properly checking these things?