Elgg/Elgg — pull request #508 by edfactor (2013-02-02 23:02:33+00:00)
Title: User with username 'read' breaks message plugin. This is the fix.

We had an Elgg user named Chris Read with username 'read'. Once he registered, people's messages stopped working because hitting a message in your inbox was a url like: [site_name]/messages/read/459 - and the message code, supporting the old URL format, looked up the parameter right after messages and did a lookup on that word. So, since it got a user, redirected to Chris's inbox no matter who you were. Yipes! So I put in some code checking that the parameter really is the logged in username, so it would work for Chris, but not for anyone else. It works fine now.