As theorized by Digital Man, the HTTP server did indeed have the same bug as the

FTP server.

Bug-fix: daily statistics and free-credits-per-day were not reset when the user
logged in via HTTP. This affected: posts_today, emails_today, free_credits,
timeon_today, and extra time values (e.g. posts_today would contnue to
accumulate potentially affecting uh... hand-wavey stuff). getuserdat() does the
necessary value resets, we just needed to write the entire user record back to
disk upon successfull login, rather than just updating specific fields in the
user record on disk.