Possible security problem

[bozhinov]

control-pane/public/index.php

Line 73 in 228e14b

<?php if(isset($user_info_txt)) echo $user_info_txt; ?>

<script type="text/javascript"> _first_start=true; err_messages={add:function(arr){for(n in arr){err_messages[n]=arr[n];}}}; user_id='1';user_login='admin'; </script>

I can't find any reference to user_login anywhere else in the code
Question is if user_id is being passed to some other script like public\js\clonos.js
to be used for user deletion or other sensitive stuff ?

I mean I can craft the page to make myself admin. admin is user_id = 1

[olevole]

You're right. apparently this is an artifact from the old code. I suppose it can be removed