Welcome , different profile name = caching issue

[Diamond Damien]

We've had a number of reports of people appearing to log in as someone else, this is a simple (**** edit ok not to simple as it turned out ****) caching issue which we're fixing now.

There is no way to access others pm's (they are not cached for obvious reasons).

Your pm info isn't at risk, it simply doesn't run that way.

If you try to pm or post when the username is altered it will revert to your logged in account when the post / pm is made and have your details on that post / pm.

Closing other threads and pointing them all here.

 

[manpower]

i dont know how but sometime i am able to READ others pm

 

[mickyfu]

i dont know how but sometime i am able to READ others pm

Maybe you have magic powers like Pewep.

 

[manpower]

Maybe you have magic powers like Pewep.

i don't know how it happened

 

[Diamond Damien]

Would be really helpful if you can drop me a pm of your entire page next time you get this with the source code.

As the pm's require additional security to access and it's not cached at that level it's hard to see how this is happening.

i dont know how but sometime i am able to READ others pm

 

[SEOZONE3]

Yes, it's happened with me too!
It was showing only one PM in my PMB, then when I refreshed my browser again, I got back my own PMB.
Thanks!

 

[Zwielicht]

I almost flipped when I thought that I saw my Settings page with infractions and PMs from moderators, but then I saw that it was someone else.

 

[annd]

Maybe you have magic powers like Pewep.

Pewep still holding it or gave up ? ( sorry - couldnt resits LOL )

 

[arganrecords]

I can read few entire PMs from other members. Diamond Damien just dropped PM with the link!

Read PM title isn't good anyway...

Edit: after refreshing the PM page PM disappeared and this message come out: Invalid Private Message specified. If you followed a valid link, please notify theadministrator

 

[quietlearner]

While viewing this thread it says I'm arganrecords with 10 notifications. Clicking on my inbox displays Gwenn's inbox, but I cannot read any of the messages. I took a screenshot:

*** removed ***

 

[THUNDERELVI]

I can read few entire PMs from other members. Diamond Damien just dropped PM with the link!

Read PM title isn't good anyway...

Edit: after refreshing the PM page PM disappeared and this message come out: Invalid Private Message specified. If you followed a valid link, please notify theadministrator

Dude I just read all the titles of your PM-s as well because I entered mine and got yours :O really strange.

 

[Deleted member 720373]

I can read few entire PMs from other members. Diamond Damien just dropped PM with the link!

Read PM title isn't good anyway...

Strangely enough arganrecords, a few seconds ago I was logged in as you.

DD, I have just opened private messages and appear to be logged in as Gwenn, I can see PM's that are not mine.

I have kept the page open and opened a new tab to reply to this thread so I can send you any info you might need.

 

[BHW-News]

So far, whenever someone has said they can see a PM, on investigation I've found they actually meant the PM landing page and not the PM body itself. Although you may be able to see the PM links, clicking on them will result in a invalid token error as they're not cached. We will check it out so can you PM me the link too and (as DD mentions above) copy and paste the source code so we can see more information.

Use support.blackhatworld.com if you need to attach files.

quietlearner - thanks for the update but I'll delete your screenshot as it's of another member's account.

Reminder: please don't post screenshots of anything that can't be viewed in the open forum.

 

[Deleted member 720373]

True Apricot, I cannot open the PMs I can only see the landing page.

I will send all the information including the source code privately and include screenshots so you guys can investigate.

 

[The Doctor]

This is confirmed by me as well. It keeps happening. I'm able to see the user's notepad, their latest messages list, and their subscription threads:

​

Note: Nothing really personal happened to be in these ones or I wouldn't have posted them. The notepad is in all likelihood cached though as mine is full of text and these users' pads are not. Other user pages could be cached as well. I didn't try.

​

 

[Diamond Damien]

Thanks guys need a view source copy paste sent over to support.blackhatworld.com or support @*not these* blackhatworld.com when you see someones pm mail. We're working on this issue as a matter of utmost urgency.

 

[The Doctor]

Thanks guys need a view source copy paste sent over to support.blackhatworld.com or support @*not these* blackhatworld.com when you see someones pm mail. We're working on this issue as a matter of utmost urgency.

damn I should have thought of that. now it's not reproducing lol. will do though if it happens again. also remember that some browsers, upon viewing source will re-request the page. I believe IE doesn't re-fetch. Not sure about other browsers. For safe measure, first right click the page and click inspect. Then see if you can copy out all the code in the DOM inspector before viewing source.

 

[Adrian112]

So it's okay if someone can see who sent me messages and what is the message title and to see my sent messages?

Imagine this happening on Facebook, it's the same thing.

 

[MorphX]

So it's okay if someone can see who sent me messages and what is the message title and to see my sent messages?

Imagine this happening on Facebook, it's the same thing.

Delete them all and nobody will be able to see the titles anymore

 

[Nut-Nights]

I was able to read someone PM. But not now.