Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Options

Username Mixup

Has anyone seen an issue when people in the forum go to make a post and the wrong person's name shows up? I've had it happen to two people in two days and its starting to worry me since we have a paid forum.

Basically they are already logged in and when they go to post, another users username is next to the post! It's crazy and I'm not sure what to do.

The other thing that may be relevant is that I went in as a user and added her photo right before this happened.

Thanks so much for reading.

Comments

  • Options

    do you use any jsconnect or other type of logins? Or is it staight vanilla login.

    did you see this

    http://vanillaforums.org/discussion/23336/it-would-be-cool-if-this-forum-forced-the-user-to-enter-the-vanilla-version-when-posting#latest

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

  • Options

    Does it persist with the wrong user? if so it could be a migration issue with jsConnect.

    grep is your friend.

  • Options

    Sorry Argh I forgot.....Version 2.0.18.1

    If they log out and back in it fixes itself.

    I'm not sure what jcConnect is, I'm not well versed in VF, I'm just a moderator trying to help. Tha

  • Options

    You should upgrade to 2.0.18.8 becuase of security fixes.

    grep is your friend.

  • Options

    Is that something I can do while the forum is live? or should I wait?

  • Options

    and thank you all so much for helping a newb out.

  • Options
    peregrineperegrine MVP
    edited April 2013

    Is that something I can do while the forum is live? or should I wait?

    Yes, you can upgrade. But it is a good idea to back up (zip up your current source) and backup database.

    Just in case.

    make sure to keep a copy of current config.php (always helps in case of trouble).

    I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.

  • Options

    Personally I would create some down time.

    Definitely backup everything.

    grep is your friend.

  • Options

    Thanks all, I will do that. Are you thinking that will fix the issue?

  • Options
    businessdadbusinessdad Stealth contributor MVP

    @DaniM53 Are the affected Users connecting from different computers? By the way you described the issue, it seems like a "hanging" session, but sessions are not shared amongst different computers (or, at least, they should not be).

  • Options

    @businessdad it could also be the that session cookie cover the whole site is being set by different apps (such as two forums), with the same salt. This would make it possible to have a mix up, becuase the the User tables IDs wouldn't necessarily be snyc with that user. if they didn't have the same salt, collision would be a lot less likely, but theoretically possible.

    It might be a bug in a proxy connect type opepration, etc.

    if in doubt update, it may also be a session bug that is already fixed.

    grep is your friend.

  • Options

    Hi All, Dani here sorry the issue went away shortly after leaving my last message.

    Since then we cloned and updated the forum to the latest version and are now having the same issue again.

    These are users across the world, so not on the same computers and not within the same network.

    Do you think something like this could be causing it?

    http://vanillaforums.org/discussion/19926/wrong-user-being-logged-in

    Or do you think the salt thing? You may have to baby talk to me...lol

    Thanks all~

  • Options

    are you running multiple version for the forum at the same time?

    how did you clone the site?

    grep is your friend.

Sign In or Register to comment.