I'm able to login with wrong password

[teamplayer10]

I created brand new account and I am able to login with any password. Even if I type no password I am able to login. What's up with that???

 

I am not using SSL. In my configure.php,

 

define('ENABLE_SSL', false);

define('HTTPS_SERVER', '');

 

In admin, my Session settings are:

 

Session Directory: /tmp

Force Cookie Use: False

Check SSL Session ID: True

Check User Agent: True

Check IP Address: False

Prevent Spider Sessions: False

Recreate Session: False

 

If anybody know how to fix this, please help!!!! Thanks in advance.