Sync Bug Fix: Deleted could still log on via SSH-SFTP-RLogin
From X-News - BBS RSS Feed to All on Tue Sep 22 12:03:45 2026
An account flagged DELETED or INACTIVE could still log on via SSH, SFTP or RLogin. Those paths resolve the account name themselves and, on a successful authentication, jump straight to logon(), bypassing login(), which was the only place the flags were checked. Thanks to StingRay for identifying this bug and DM for the quick fix.