Author Topic: Weird session issue (Read 3733 times)

Timmy Fox · « **on:** January 07, 2020, 10:31:57 PM »

So .. this is odd.

I'm on Firefox 72 (Beta), 64-bit running the the most recent release of Windows 10.

I came onto the forum like usual, opening up the main forum page like always through my usual bookmark (link: https://www.thefurryforum.com/forums/index.php?action=forum).

I went to view my unread posts (clicking the "You have X unread posts since last visit.") and then clicked "Mark all messages as read" after reviewing the list of unread posts.

I noted that it took a little longer than normal to load and once it did I was met with the following page (attachment), seemingly logged into someone else's account. Now, browsing anywhere else (by opening a new tab) put me back to my own account and trying to click "Mark all messages as read" again gave me a "Session verification failed." error, so it doesn't seem very exploitable, at least.

No idea what might've caused it though, it just seemed to happen all randomly.

Timmy Fox · « **Reply #1 on:** January 17, 2020, 12:33:03 AM »

Happened again, I just opened the main forum page through a bookmark

This time it was Romulan_Furry's avatar and name that showed up in place of my own.

Tweak · « **Reply #2 on:** January 17, 2020, 01:22:45 AM »

This should be fixed now, please let us know if it happens again.

Alessia Starfurr · « **Reply #3 on:** February 17, 2020, 01:59:30 AM »

Should anyone be worried about this, Tweak?

Tweak · « **Reply #4 on:** February 18, 2020, 02:47:07 AM »

Nah, everyone's accounts were safe, the sessions remained secured. The issue was related to the micro-caching for the server, I didn't disable it after migrating servers.