SiteSecurity.cs has some some shady code with regards to case insensitive name comparisions. Testing equality with ToUpper is wierd when string.equals(...,StringComparision.InvariantCultureIgnoreCase) exists. Also, some if(<condition) return true; else return false; type constructs were removed.
In the login code, the logic was convoluted and also repeated itself. I have made some changes to remove some redundant loops; I replaced them with calls to GetUser(userName).
This is in dasBlog 2.0 .
a patch against revision 806 for SiteSecurity.cs
Logged In: YES
user_id=408799
Originator: NO
fixed in codeplex revision 12758