FIXED! Logged under another user

[OutVolt]

I went to this site and got an error about shout box and the theme was black. Don't know how but I was logged in as a different user.

 

[shaunj66]

We're aware of this issue and are already investigating. Thanks for the report however!

 

[Enkuler]

I was lurking, offline, and suddenly I got that. Except, you know, what the title says. When I logged in (which was "hard" since the login button was not there lol, so I clicked on a random thing in that menu which prompted me to log in) I had my normal account though.

 

[shaunj66]

It's a known issue and is due to our caching system. You wouldn't be able to view the user's personal details, conversations etc. however.

 

[Enkuler]

Oh yeah, I see it there. https://gbatemp.net/threads/logged-under-another-user.517311/
Sorry, I saw one thread with [BUG] and expected all bug reports would use that "tag" and didn't check threads without that "tag", my bad.

 

[PanTheFaun]

I was using one of my computers today and a user by the name of NinjiStix was logged onto gbatemp from my computer? I'm a little weirded out right now and I have no idea how this could happen.
Any clue???

 

[M7L7NK7]

It's a glitch

 

[PanTheFaun]

It's a glitch

I hope so...

 

[M7L7NK7]

https://gbatemp.net/threads/logged-under-another-user.517311/

 

[PanTheFaun]

https://gbatemp.net/threads/logged-under-another-user.517311/

I feel better. Thanks for showing me that!

 

[Maximilious]

A week or two ago I got a PM from someone that said they VPN'd with Opera (based on Chromium) and somehow got logged into my account with a screencapture to prove it. I have 2FA on my account and have a random generated PW, but ended up wiping my computer anyway (due to another security incident I had the day before which was coincidence).

Anyway, I'm also noticing that I'm having trouble logging in with Chrome, and after getting logged in a bit ago tonight I opened a few tabs, but found that instead of being logged into my account I was logged into a level 2 members account instead. I forget whose account it was, but I doubt that matters. I can clear my cache and get logged in with Chrome, but I get booted again if I open a new tab or click a link.

Edge browser seems to be working just fine as a workaround for me, but this is definitely a security issue and could cause some malicious behavior and I wanted to let someone know.

 

[Scarlet]

The issue is purely visual, and has already been brought up here: https://gbatemp.net/threads/logged-under-another-user.517311/

They have no access to any of your PMs or anything like that, there's nothing to be worried about.

Edit: As a side note, I also had the bug where I thought I was logged in as you. It caught me off guard to see TempStyle Dark lol. Tried sending a message in the Shoutbox to test if I had access to anything and it denied me, saying I needed to log on.

 

[Chary]

It's due to something new with the site which makes it easier on the server. Not sure if there's a fix, but nothing bad can happen regarding it, like access to info or posting as another user.

 

[Costello]

at first it was not happening but now it seems to be happening more and more.

you aren't actually logged in as someone else's account, but you're getting a cached page that was generated by another user, it goes away when you browse.

since it's happening more and more we will probably have to disable that thing and find another way to enable caching

 

[Axido]

That bug just creeped me out.


On the other hand... now knowing that this is purely visual I hope for someone to get my profile showing up... probably getting creeped out just as much.

 

[Maximilious]

That bug just creeped me out.
View attachment 144105 View attachment 144106

On the other hand... now knowing that this is purely visual I hope for someone to get my profile showing up... probably getting creeped out just as much.

That's the user I was logged in as. On another note - I can't use Chrome at all. Totally unusable as after I log in successfully, any new tab or link I open just shows me as logged out. Pretty frustrating, and not sure why but my account seems to be pretty impacted by this (and BigJokker I assume too). Guess I have to use Edge for now (bleh).

 

[Costello]

That's the user I was logged in as. On another note - I can't use Chrome at all. Totally unusable as after I log in successfully, any new tab or link I open just shows me as logged out. Pretty frustrating, and not sure why but my account seems to be pretty impacted by this (and BigJokker I assume too). Guess I have to use Edge for now (bleh).

do you have cookies disabled ? via an extension or a setting or anything
if you do, that completely explains all this thread.

the caching system basically enables itself for users that do not have cookies set in their browser (ie. guests. because all guests see the same content)
if somehow you use an extension that prevents cookies from working, then you wont be able to stay logged in, and some caching issues can occur

 

[Maximilious]

do you have cookies disabled ? via an extension or a setting or anything
if you do, that completely explains all this thread.

the caching system basically enables itself for users that do not have cookies set in their browser (ie. guests. because all guests see the same content)
if somehow you use an extension that prevents cookies from working, then you wont be able to stay logged in, and some caching issues can occur

I don't have cookie's disabled, but I don't accept the prompt to allow GBATemp to send my browser notifications, which would explain the behavior. I typically have your site up at work and don't want things to pop up on me unexpectedly.

 

[ry755]

but I don't accept the prompt to allow GBATemp to send my browser notifications

I have that turned off too, and I've never had any problems

 

[Maximilious]

I have that turned off too, and I've never had any problems

Is your Chrome up to date? I can replicate the behavior or two different computers (personal and work) on the latest Chrome browser. Today seems to be fine though so they may have changed something on the back end already.