Today I had a firewall alert which I decided to whitelist because the alert was for a search in the search box on one of the WPMU sites. So I duly clicked on the "click here to whitelist this variable" and it tried to take me to my template site, but instead of that it took me to a page saying I didn't have administration access for that site and then says "if you reached this screen by accident and meant to visit one of your own sites, here are some shortcuts to help you find your way."
Below that was listed all of my sites on that WPMU with the option to either visit the site or go to the dashboard.
Imagine my surprise and horror when I clicked on the dashboard of the main site only to be taken direct to the dashboard WITHOUT any LOGGING IN!!!
I definitely was not logged in before doing this.
here is the url that it was using [quote]http://template.domain.com/wp-admin/options-general.php?page=wordpress-firewall-2.php&set_whitelist_variable=s[/quote]
how am I able to get in without actually logging in