User swapping [message #9991] |
Wed, 14 May 2003 11:35 |
ctbk
Messages: 142 Registered: April 2002 Location: Milan, Italy
Karma: 0
|
Senior Member |
|
|
Sometimes happens that users find themselves logged with an account they don't own. It's not frequent, but happens. What could be the causes (some wrong lock in the session table?)? Is it a known problem?
What if some user starts bad behaviours with another account?
What if someone finds himself logged as Administrator??
~
~
:wq
[Updated on: Wed, 14 May 2003 11:37] Report message to a moderator
|
|
|
Re:User swapping [message #9993 is a reply to message #9991] |
Wed, 14 May 2003 12:07 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
Personally I've never seen that happen. There is no 'bad' type of a lock since we use standard database locks not that it makes any kind of a difference in this case.
As for why it *could* happen, well it would mean that somehow a user had aquired a cookie with who's session id points at a record at a user id other then their own.
FUDforum Core Developer
|
|
|
Re:User swapping [message #9994 is a reply to message #9993] |
Wed, 14 May 2003 12:14 |
ctbk
Messages: 142 Registered: April 2002 Location: Milan, Italy
Karma: 0
|
Senior Member |
|
|
I don't know, it has been reported twice, from different users. They opened their browser and were logged with another account. Fortunately they were trusted ppl, so logged off and authenticated themselves correctly. But it has happened. One of them wrote a little message using the "other" account, to report the issue.
~
~
:wq
|
|
|
Re:User swapping [message #10002 is a reply to message #9994] |
Wed, 14 May 2003 14:23 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
Which database are you using (include version) and what version of FUDforum are you using?
FUDforum Core Developer
|
|
|
|
Re:User swapping [message #10111 is a reply to message #10100] |
Mon, 19 May 2003 16:51 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
Hmm... lets do the following, wait for 2.5.0 to comeout. Since a bug such as this is nearly impossible to debug due to the large changest in the relavent code set between 2.3.8 & 2.5.0. If the bug persists hopefuly we'd be able to track it down more easily with the more extensive & generally better error reporting & tracking facilities of 2.5.0.
So, for now wait till 2.5.0 stable to come out.
FUDforum Core Developer
|
|
|
|