Login sticks when sending a link!

Suggestions & Help using the Corsa E Forums
Post Reply
User avatar
KingCraigx
Posts: 145
Joined: Wed Mar 30, 2016 4:19 pm
Location: Lancashire

Login sticks when sending a link!

Post by KingCraigx » Thu Jan 19, 2017 9:54 am

Hello admins,

I just sent a link to a forum on here (I am of course logged in) to one of my friends. My personal login was kept and moved over with the link, he can now post as me, see my details etc.

Luckily this is just a friend who was honest but surely this is a massive security flaw?!

Please respond ASAP.
White Corsa 1.4 N/A LE w/ Sports Pack // Ramair Intake // Cobra Sports Exhaust // Full LED & HID Conversion


Rob
Site Admin
Posts: 157
Joined: Mon Mar 31, 2014 3:38 pm

Re: Login sticks when sending a link!

Post by Rob » Thu Jan 19, 2017 10:26 am

Hi,
Login details are cookie based and not part of the url so I don't think this is possible.

Could you email the link you sent to: info@corsaeforums.co.uk and I'll double check.

Thanks


User avatar
KingCraigx
Posts: 145
Joined: Wed Mar 30, 2016 4:19 pm
Location: Lancashire

Re: Login sticks when sending a link!

Post by KingCraigx » Thu Jan 19, 2017 2:31 pm

Thanks Rob, ive sent the link over the the info@ now!

Yeah I know its based off cookies but this defiantly happened, if it helps- we are both connected to the same domain.
White Corsa 1.4 N/A LE w/ Sports Pack // Ramair Intake // Cobra Sports Exhaust // Full LED & HID Conversion


Rob
Site Admin
Posts: 157
Joined: Mon Mar 31, 2014 3:38 pm

Re: Login sticks when sending a link!

Post by Rob » Thu Jan 19, 2017 2:36 pm

The link doesn't contain any login details so that's fine. I wonder how your domain and cookie setup is, do you have a shared cookie folder? Perhaps you've left yourself logged in on their machine or they know your password?


User avatar
KingCraigx
Posts: 145
Joined: Wed Mar 30, 2016 4:19 pm
Location: Lancashire

Re: Login sticks when sending a link!

Post by KingCraigx » Thu Jan 19, 2017 5:15 pm

Nope using a different domain account and I have never used his PC. Might just be a one off, ill try it later and see.

Our cookies are not shared, I have no idea why that happened.
White Corsa 1.4 N/A LE w/ Sports Pack // Ramair Intake // Cobra Sports Exhaust // Full LED & HID Conversion


Post Reply

Return to “Website Issues”