Locked user bug

[Migrated From Jforum.net]

Noticed that a locked user can overcome his lockout from the forum by requesting for a 'I lost my password' mail, follow the link to create a new password and logged himself back into the forum.


[originally posted on jforum.net by munhin]

[Migrated From Jforum.net]

oops, think I'm mistaken. The locked user still can't logged in even though the password can be changed successfully.
[originally posted on jforum.net by munhin]