262678 - saving MY username/password for site replacing OTHERS username in administrative areas of phpBB

Status: VERIFIED DUPLICATE of bug 112260

(SeaMonkey :: Passwords & Permissions, defect)

Description

[Jo Anne Brown]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; rv:1.7.3) Gecko/20040913 Firefox/0.10

The issue is with saving my username/password for www.jfo.org.uk/jfoi/, which is
a generic phpBB. I am however, also the administrator of the forum and the
problem is when I go into the admin panel [which you will not be able to see or
access on this page]. Choosing Membership Management to change/amend a users
details and on entering a specific user, their username is replaced by mine
[assuming that its taking the info from the save username/password for this site]. 

I therefore cannot administrate the board in Firefox, I need to log out and use
IE, which is a pain. My alternative is not to capture my username/password for
this site, which I don't want to do because of the frequency of use. 

Can Firefox distinguish between a true login and the administrative control of
another username in forums like phpBB?

Reproducible: Always
Steps to Reproduce:
1. become an administrator of a generic phpBB
2. go to admin panel; user admin; management
3. select a user, not yourself
4. if you have saved your username/password for this site, their username will
be quickly replaced with yours

Actual Results:  
I need to log out and use IE to admin the board. If you make changes the user
will have problems logging in, in my case, i needed to change the persons user
completely. I think this issue causes problems with the DB as two users cannot
have the same username.

Expected Results:  
Firefox should be able to distinguish between a true login and the
administrative control of others usernames.

This problem can corrupt users logins if they are administered in firefox but as
there is a work around using IE, I am listing it as 'normal' severity.

Comment 1

[Daniel Veditz [:dveditz]]

There is no way to distinguish the form's purpose from its structure, but bug
112260 would help. Or we could invent some mechanism to allow turning off
password manager by page rather than just by site

*** This bug has been marked as a duplicate of 112260 ***