Logging in as other users - need your help

[mooniac58]

Hey guys,

I have done a bit of work on the site today trying to help the problem of people getting logged in as other users.  I have made a few changes and added some diagnostics routines.

For now I just need people to report to me when they see themselves logged in as someone else.  Please email me directly at admin@mmorpg.com if you see this.

Thank you!

Craig

[PTK]

I am logged in incorrectly as Allsmiles right now, I have read all his PM's and I actually thought of creating an inapproriate and an highly agressive post to stir up the Fantom/Allsmiles fued....buuut, I'll just log off and log back in.

[fantom]

Hey....what's a fued?

I log in as allsmiles all the time just to spice things up and argue with myself :-)))

[FloridaMan]

Are you running IIS? If you're on an older version and have file compression turned on (I think that's the feature), it can cause this behavior. I ran into it once a while back. 

[mooniac58]

We are running IIS 6.0 (a pretty new version) and I just verified that compression is not enabled.  Thanks for the suggestion though!

[FloridaMan]

Verify output caching isn't enabled in IIS. I can't remember the exact setting and I don't have an IIS 6 box handy, but I remember it was in the admin interface, it was something that was supposed to improve performance, there were two checkboxes and one of them caused all sorts of hell if it was checked. 

[FloridaMan]

I've been trying to catch it, but it looks like there's not enough activity for me to detect the issue. It certainly seems like the rendered content, possibly including authentication cookies is being cached and resent when another user requests a page, thus changing users' login information. Google Chrome has excellent tools for detecting this type of stuff. (View Menu >> Developer >> Developer Tools). Click "Network," select your file (e.g. index.cfm) and pay attention to headers and cookies. It may help to be logged in as another user in a separate browser or have someone else hammer away at your site to help detect the issue. 

[Awful_Charlie]

It's only happened to me a couple of times, and I've managed to realise before posting anything.  I have noticed that is only occurs after getting a ColdFusion error, but not after each one though

Good luck nailing it

Ben

Here is a copy/paste of the error that made it happen last time:

  My Profile Logout [fantom]

• 
  
• Home
  
• Forums
  
• Photo Galleries
  
• Resources
  

View New Posts   Subscriptions   Members   0 New PM(s)   Search

MooneySpace.com Forum List

Topics With New Posts

Forum Topic New Posts General Mooney Talk Mooney plastic panel repair 6

The web site you are accessing has experienced an unexpected error.
Please contact the website administrator.

The following information is meant for the website developer for debugging purposes.

Error Occurred While Processing Request

96 : 97 : 98 : 99 : Element MAXPOSTDISPLAY is undefined in SES.   The error occurred in D:\websites\mooneyspace\forums\dsp\dsp_newposts.cfm: line 97 Called from D:\websites\mooneyspace\forums\cf4em.cfm: line 122 Called from D:\websites\mooneyspace\index.cfm: line 91 95 : #threadTitle# #newPosts##totalPosts# Jump To New Resources: Check the ColdFusion documentation to verify that you are using the correct syntax. Search the Knowledge Base to find a solution to your problem.   Browser   Mozilla/5.0 (Windows NT 5.1; rv:7.0.1) Gecko/20100101 Firefox/7.0.1 Remote Address   62.202.<<my bit>> Referrer   http://www.mooneyspace.com/index.cfm?mainaction=posts&forumid=1&threadid=3760&postid=46277&page=1 Date/Time   07-Nov-11 07:53 PM Stack Trace at cfdsp_newposts2ecfm1310110759.runPage(D:\websites\mooneyspace\forums\dsp\dsp_newposts.cfm:97) at cfcf4em2ecfm381652218.runPage(D:\websites\mooneyspace\forums\cf4em.cfm:122) at cfindex2ecfm1792238315.runPage(D:\websites\mooneyspace\index.cfm:91) coldfusion.runtime.UndefinedElementException: Element MAXPOSTDISPLAY is undefined in SES. at coldfusion.runtime.DotResolver.resolveSplitNameInMap(DotResolver.java:108) at coldfusion.runtime.CfJspPage._resolve(CfJspPage.java:1550) at coldfusion.runtime.CfJspPage._resolveAndAutoscalarize(CfJspPage.java:1729) at coldfusion.runtime.CfJspPage._resolveAndAutoscalarize(CfJspPage.java:1722) at cfdsp_newposts2ecfm1310110759.runPage(D:\websites\mooneyspace\forums\dsp\dsp_newposts.cfm:97) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:196) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:483) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2661) at cfcf4em2ecfm381652218.runPage(D:\websites\mooneyspace\forums\cf4em.cfm:122) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:196) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:483) at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:2661) at cfindex2ecfm1792238315.runPage(D:\websites\mooneyspace\index.cfm:91) at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:196) at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:483) at coldfusion.filter.CfincludeFilter.invoke(CfincludeFilter.java:65) at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:288) at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:48) at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40) at coldfusion.filter.PathFilter.invoke(PathFilter.java:86) at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:70) at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28) at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38) at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:46) at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38) at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22) at coldfusion.CfmServlet.service(CfmServlet.java:198) at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:89) at jrun.servlet.FilterChain.doFilter(FilterChain.java:86) at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:42) at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:46) at jrun.servlet.FilterChain.doFilter(FilterChain.java:94) at jrun.servlet.FilterChain.service(FilterChain.java:101) at jrun.servlet.ServletInvoker.invoke(ServletInvoker.java:106) at jrun.servlet.JRunInvokerChain.invokeNext(JRunInvokerChain.java:42) at jrun.servlet.JRunRequestDispatcher.invoke(JRunRequestDispatcher.java:286) at jrun.servlet.ServletEngineService.dispatch(ServletEngineService.java:543) at jrun.servlet.jrpp.JRunProxyService.invokeRunnable(JRunProxyService.java:203) at jrunx.scheduler.ThreadPool$DownstreamMetrics.invokeRunnable(ThreadPool.java:320) at jrunx.scheduler.ThreadPool$ThreadThrottle.invokeRunnable(ThreadPool.java:428) at jrunx.scheduler.ThreadPool$UpstreamMetrics.invokeRunnable(ThreadPool.java:266) at jrunx.scheduler.WorkerThread.run(WorkerThread.java:66)

[DrBill]

Just happend to me,  I brought up the site and am usually logged in automatically. this time I was roundout. Caught it when a post had the wrong avatar !!

Dr BILL

 

[TonyPynes]

just happened

[Joehogan2]

May 31st I was able to edit someone elses post ubder another persons log in. All this by mistake. At the time I was trying to posr a respnse.

 

Joe

[rodtimmons]

Weird, I have been logged out (by the server 3 times this morning).  I am relatively new on the site... Also have timed-out on quite a few searches, the more "complex" the search, the more likely the timeout over the past few days.. are these types of issues common on this site or is this unusual or is the webdude working on the site right now...?? Connectivity issue?