[Oreo_Otaku]

When I first came on the board today it said I was logged in as Lezzy-cat. Then I clicked on the name and it went back to my SN after going to her profile page.

[this_chick25]

Yep, there's been a lot of that lately. There is another thread with at least four others (and one I talked to on the phone) who have been having that problem. so far, I've been logged in as

Millions_Knives
Kashiin Fayden
Purplegoddess
excel excel
kibara
Lezzy-cat
Moogle21
longsii

and about three others, but I forget because I'm not really familiar with them. Sometimes it coincides with the person being online

(I noticed that function has been glitchy lately too--the "Active Users" and related functions)

and other times it seems random. Maybe some wires were crossed in the update...

[excel excel]

The exact same thing happened to me yesterday! I was logged in as a different person. I had to logout and reenter my user name and password. There have been a lot of glitches lately.

[akaikurama]

well I have just been having problems posting, every time I try to post it says the menu has been disabled and I have to sign in to post. The other thing is that when I'm on it says that no one is on the forums not even guests.

[Imaurel]

It happened with me earlier today as Lezzy-Cat.

[Juri]

Hi all,

I believe this is a conflict with Invision and the new server. Invision lists it as a known issue, and I'm going to try and get it fixed ASAP.


-Juri
who started out logged in as 'Moogle21' ;

[excel excel]

Ok I just logged in on the ACen forums as JR Wheeler. WTF?

[Taz6672]

i am at work and when to the site and the computer said i was excel excel

so i loged out and sign it as me TAZ

[excel excel]

Hey! You stole my identity =P

[trythisoutchiki]

OH NO FAIR!! I WANNA BE EXCEL EXCEL XD! Can't say I've had these problems tho', but I have had to log in a ton.

[Purplegodess]

trythisoutchiki, on Dec 4 2007, 03:50 PM, said:

OH NO FAIR!! I WANNA BE EXCEL EXCEL XD! Can't say I've had these problems tho', but I have had to log in a ton.

each day when i log in im a different user today seems to be excelexcel day for me

[excel excel]

Hmmm...must be opposite opposite day?

[omni]

XD I haven't had this problem yet. Although whenever I get on here it lists me as not logged in and then as soon as a click a link, I am suddenly logged in. And sometimes the boards don't actually update.

[yoru]

yeah i was purple goddess and excel excel
i was like what the ****

[trythisoutchiki]

I'm curious as to exactly HOW that fluke works. XD Seriously that must be something going to a forum and discovering you aren't signed on with your screename. 0_o'

[omni]

Hey excel...you have for new messages. XD Was just signed in as you!

[excel excel]

I was signed in as Purplegoddess.....

On a serious note if someone is logged in on a different persons name isn't there a privacy problem?

[trythisoutchiki]

D: I hadn't thought of that. Doesn't it change back to your screename after you go and try to click something? Or do you actually have to log off from that account to sign in on your own?

[this_chick25]

As a precaution you can do the latter, but I have logged in from three different PC's today to test it--two that I am already always logged in on, and one from which I have never accessed ACen forums. Even though you are automatically logged in as someone else, you can't access their account.

If you were to click on the "My Controls", "View Messages", etc. (basically anything that would be used to access the personal info or make changes to their account), the next screen either shows that you already logged in as yourself or requires you to log in.

[Imaurel]

Yeah, sometimes it shows me as logged off as well.
I always just click on the ACEN forums link again and it rights itself.
But if a glitch like that got any worse I'd be worried to be Excel Excel or Lezzy-Cat or whoever else is getting it xD

[this_chick25]

Whoooa. I just came back from poking around the intarwebs and was logged in as Juri!!! (Interesting view she has there, too...)

[Trini]

*was almost everyone in this thread* I'm so happy someone else is goin through this cause this has been happening all weekend and I was thinkin I got hacked or something.

[excel excel]

Heh. I was logged in as this chick

[kahad]

I'm hoping that I'll eventual be signed in as Excel. I would change her signature to either "Kentucky rules!!!" or "Kahad was here!!!"

[gregly]

This sounds like either {a} the forum engine is not properly setting HTTP response headers to tell clients (and any proxy servers that might be in front of the web server) not to cache pages, or {b} any proxy server(s) sitting in front of the web server are not honoring the HTTP headers.

PHP code such as this, added to all pages, would force them to never be cached (by compliant caches):
<?php

// Date in the past
header("Expires: Mon, 26 Jul 1997 05:00:00 GMT");
// always modified
header("Last-Modified: " . gmdate("D, d M Y H:i:s") . " GMT");
// HTTP/1.1
header("Cache-Control: no-store, no-cache, must-revalidate");
header("Cache-Control: post-check=0, pre-check=0", false);
// HTTP/1.0
header("Pragma: no-cache");
?>

Since peoples' logins revert when they refresh the page, it doesn't sound like anybody is actually acquiring anybody else's credentials -- only that the static HTML generated by somebody else on the site is being delivered to somebody else. However, this could potentially create a serious security leak, if (for example) an admin page showing sensitive information is delivered to some other random person.

The forum server identifies itself as Apache (according to a wget of a forum page); if modifying the board software is out of the question, another solution would be to use Apache's mod_headers module to force all served pages to include those same headers. Of course, if there's a naughty proxy or cache in between which is blatantly ignoring headers, neither of those will do any good -- but it's a start.

[excel excel]

kahad, on Dec 4 2007, 08:57 PM, said:

I'm hoping that I'll eventually be signed in as Kahad. I would change his signature to either "Florida rules!!!" or "excel excel was here!!!"

Fixed