1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Welcome , different profile name = caching issue

Discussion in 'Forum Suggestions & Feedback' started by Diamond Damien, Jul 8, 2015.

Thread Status:
Not open for further replies.
  1. Diamond Damien

    Diamond Damien Owner BlackHatWorld Staff Member Jr. VIP

    Joined:
    Oct 27, 2005
    Messages:
    55,705
    Likes Received:
    12,942
    Occupation:
    BlackHatWorld
    Location:
    BHW - of course.
    Home Page:
    We've had a number of reports of people appearing to log in as someone else, this is a simple (**** edit ok not to simple as it turned out ****) caching issue which we're fixing now.

    There is no way to access others pm's (they are not cached for obvious reasons).

    Your pm info isn't at risk, it simply doesn't run that way.

    If you try to pm or post when the username is altered it will revert to your logged in account when the post / pm is made and have your details on that post / pm.

    Closing other threads and pointing them all here.
     
    • Thanks Thanks x 46
  2. manpower

    manpower Newbie

    Joined:
    Jun 30, 2014
    Messages:
    48
    Likes Received:
    19
    i dont know how but sometime i am able to READ others pm :(
     
    • Thanks Thanks x 1
  3. mickyfu

    mickyfu Jr. VIP Jr. VIP

    Joined:
    Dec 14, 2011
    Messages:
    6,868
    Likes Received:
    19,725
    Occupation:
    King Of Crypto C
    Location:
    Solihull Young Offenders
    Maybe you have magic powers like Pewep.
     
    • Thanks Thanks x 15
  4. manpower

    manpower Newbie

    Joined:
    Jun 30, 2014
    Messages:
    48
    Likes Received:
    19
    :D i don't know how it happened
     
  5. Diamond Damien

    Diamond Damien Owner BlackHatWorld Staff Member Jr. VIP

    Joined:
    Oct 27, 2005
    Messages:
    55,705
    Likes Received:
    12,942
    Occupation:
    BlackHatWorld
    Location:
    BHW - of course.
    Home Page:
    Would be really helpful if you can drop me a pm of your entire page next time you get this with the source code.

    As the pm's require additional security to access and it's not cached at that level it's hard to see how this is happening.

     
    • Thanks Thanks x 3
  6. SEOZONE3

    SEOZONE3 Jr. VIP Jr. VIP

    Joined:
    Jun 15, 2011
    Messages:
    1,823
    Likes Received:
    212
    Occupation:
    WEBMASTER, IM, BUSINESS, ONLINE MARKETING Expert
    Location:
    I'm here for U always...
    Home Page:
    Yes, it's happened with me too!
    It was showing only one PM in my PMB, then when I refreshed my browser again, I got back my own PMB.
    Thanks!
     
  7. Zwielicht

    Zwielicht Moderator Staff Member Moderator Jr. VIP

    Joined:
    Aug 31, 2013
    Messages:
    6,600
    Likes Received:
    11,747
    Gender:
    Male
    Occupation:
    Private Investigator
    Location:
    Riverside, California
    Home Page:
    I almost flipped when I thought that I saw my Settings page with infractions and PMs from moderators, but then I saw that it was someone else. :p
     
  8. annd

    annd Regular Member

    Joined:
    Jul 30, 2008
    Messages:
    438
    Likes Received:
    162
    Gender:
    Female
    Pewep still holding it or gave up ? ( sorry - couldnt resits LOL )
     
  9. arganrecords

    arganrecords Elite Member

    Joined:
    Oct 12, 2013
    Messages:
    1,652
    Likes Received:
    2,039
    Occupation:
    Go Hard Or Go Home
    Location:
    Italy
    I can read few entire PMs from other members. Diamond Damien just dropped PM with the link!

    Read PM title isn't good anyway...

    Edit: after refreshing the PM page PM disappeared and this message come out: Invalid Private Message specified. If you followed a valid link, please notify theadministrator
     
    Last edited: Jul 9, 2015
  10. quietlearner

    quietlearner Junior Member

    Joined:
    Jun 22, 2015
    Messages:
    116
    Likes Received:
    42
    While viewing this thread it says I'm arganrecords with 10 notifications. Clicking on my inbox displays Gwenn's inbox, but I cannot read any of the messages. I took a screenshot:

    *** removed ***
     
    Last edited by a moderator: Jul 9, 2015
  11. THUNDERELVI

    THUNDERELVI Elite Member

    Joined:
    Sep 12, 2009
    Messages:
    2,399
    Likes Received:
    2,074
    Gender:
    Male
    Location:
    W3
    Dude I just read all the titles of your PM-s as well because I entered mine and got yours :O really strange.
     
    • Thanks Thanks x 1
  12. sturose

    sturose Jr. VIP Jr. VIP

    Joined:
    Nov 6, 2013
    Messages:
    1,548
    Likes Received:
    1,915
    Gender:
    Male
    Occupation:
    Clicking my own adverts
    Location:
    Stuck in a rut
    Strangely enough arganrecords, a few seconds ago I was logged in as you.

    [​IMG]


    DD, I have just opened private messages and appear to be logged in as Gwenn, I can see PM's that are not mine.

    I have kept the page open and opened a new tab to reply to this thread so I can send you any info you might need.
     
  13. Apricot

    Apricot Administrator Staff Member

    Joined:
    Mar 26, 2013
    Messages:
    12,554
    Likes Received:
    7,975
    Gender:
    Female
    Occupation:
    BHW Moderator
    Location:
    the clacks
    Home Page:
    So far, whenever someone has said they can see a PM, on investigation I've found they actually meant the PM landing page and not the PM body itself. Although you may be able to see the PM links, clicking on them will result in a invalid token error as they're not cached. We will check it out so can you PM me the link too and (as DD mentions above) copy and paste the source code so we can see more information.

    Use support.blackhatworld.com if you need to attach files.

    quietlearner - thanks for the update but I'll delete your screenshot as it's of another member's account.

    Reminder: please don't post screenshots of anything that can't be viewed in the open forum.
     
    • Thanks Thanks x 7
  14. sturose

    sturose Jr. VIP Jr. VIP

    Joined:
    Nov 6, 2013
    Messages:
    1,548
    Likes Received:
    1,915
    Gender:
    Male
    Occupation:
    Clicking my own adverts
    Location:
    Stuck in a rut
    True Apricot, I cannot open the PMs I can only see the landing page.

    I will send all the information including the source code privately and include screenshots so you guys can investigate.
     
    • Thanks Thanks x 1
  15. The Doctor

    The Doctor Jr. VIP Jr. VIP

    Joined:
    Dec 18, 2010
    Messages:
    885
    Likes Received:
    261
    Occupation:
    Computer Scientist, Engineer, Programmer.
    Location:
    ☆☆☆☆☆☆
    Home Page:
    This is confirmed by me as well. It keeps happening. I'm able to see the user's notepad, their latest messages list, and their subscription threads:

    2015-07-09_0607.png 2015-07-09_0702.jpg 2015-07-09_0705.jpg

    Note: Nothing really personal happened to be in these ones or I wouldn't have posted them. The notepad is in all likelihood cached though as mine is full of text and these users' pads are not. Other user pages could be cached as well. I didn't try.


     
  16. Diamond Damien

    Diamond Damien Owner BlackHatWorld Staff Member Jr. VIP

    Joined:
    Oct 27, 2005
    Messages:
    55,705
    Likes Received:
    12,942
    Occupation:
    BlackHatWorld
    Location:
    BHW - of course.
    Home Page:
    Thanks guys need a view source copy paste sent over to support.blackhatworld.com or support @*not these* blackhatworld.com when you see someones pm mail. We're working on this issue as a matter of utmost urgency.
     
    • Thanks Thanks x 4
  17. The Doctor

    The Doctor Jr. VIP Jr. VIP

    Joined:
    Dec 18, 2010
    Messages:
    885
    Likes Received:
    261
    Occupation:
    Computer Scientist, Engineer, Programmer.
    Location:
    ☆☆☆☆☆☆
    Home Page:
    damn I should have thought of that. now it's not reproducing lol. will do though if it happens again. also remember that some browsers, upon viewing source will re-request the page. I believe IE doesn't re-fetch. Not sure about other browsers. For safe measure, first right click the page and click inspect. Then see if you can copy out all the code in the DOM inspector before viewing source.
     
    • Thanks Thanks x 1
  18. Adrian112

    Adrian112 Supreme Member Premium Member

    Joined:
    Jan 16, 2014
    Messages:
    1,371
    Likes Received:
    2,614
    So it's okay if someone can see who sent me messages and what is the message title and to see my sent messages?

    Imagine this happening on Facebook, it's the same thing.
     
  19. eXampL

    eXampL Power Member

    Joined:
    Jan 24, 2015
    Messages:
    511
    Likes Received:
    368
    Delete them all and nobody will be able to see the titles anymore
     
  20. Nut-Nights

    Nut-Nights Jr. VIP Jr. VIP

    Joined:
    Jun 20, 2013
    Messages:
    5,039
    Likes Received:
    3,209
    Location:
    Hell
    Home Page:
    I was able to read someone PM. But not now.
     
Thread Status:
Not open for further replies.