• Please take a moment to look over the Suggestions & Feedback rules before making a post: READ RULES HERE

Welcome , different profile name = caching issue

Status
Not open for further replies.
It's far from resolved lads.. if anything it's got worse.

It's been happening to me daily still.. Before I was not so worried as no one could actually get in to any PMs.. Until now

I was replying to my clients PMs and clicked on the last one assuming it was for me - it Opened but guess what.. it wasn't for me, I was logged in as someone else again but this time I could read their PMs!

Now I am worried as I was assured PMs could not be read, but as you can see they can...

***mod edit: screenshot removed***
 
Last edited by a moderator:
Okay, I suppose that's helpful but you should delete that pic from the thread (Or DD is going to wind up doing it because it has someone else's priv info). Just send to support at blackhatworld.com or use the form at support.blackhatworld.com. Copying the code from view source and saving it to an html file and giving it to them might help as well.
 
Last edited:
It's far from resolved lads.. if anything it's got worse.

It's been happening to me daily still.. Before I was not so worried as no one could actually get in to any PMs.. Until now

I was replying to my clients PMs and clicked on the last one assuming it was for me - it Opened but guess what.. it wasn't for me, I was logged in as someone else again but this time I could read their PMs!

Now I am worried as I was assured PMs could not be read, but as you can see they can...


I can confirm that I too have been able to open another users PM.
 
Thanks for letting us know t0mmy - can you send details of your location/os to me directly? Did you manage to get the page source?

Screenshot is saved so I'll remove it from the thread and we'll investigate this immediately.

ETA: If any of you see this, can you please take a screenshot, paste page source into a text file & send via support.blackhatworld.com
 
Last edited:
Thanks for letting us know t0mmy - can you send details of your location/os to me directly? Did you manage to get the page source?

Screenshot is saved so I'll remove it from the thread and we'll investigate this immediately.

ETA: If any of you see this, can you please take a screenshot, paste page source into a text file & send via support.blackhatworld.com

Sorry man I didn't know about grabbing the source or any of that. I seen it happen.. panicked so took a screenshot then reported here. I'll ping you with those other details now.
 
We've had a number of reports of people appearing to log in as someone else, this is a simple caching issue which we're fixing now.

There is no way to access others pm's (they are not cached for obvious reasons).

Your pm info isn't at risk, it simply doesn't run that way.

If you try to pm or post when the username is altered it will revert to your logged in account when the post / pm is made and have your details on that post / pm.

Closing other threads and pointing them all here.
It happened with me also.
I closed my browser and logged in again and I was good to go.
 
Thanks all we're patching a fix to try and make sure this doesn't happen again. One step back to take 3 steps forward.
 
It's happening today also.
Check this: mod edit ; I hope the problem will be solved asap.
 
Thanks all per above we're patching a longer terms fix right now. pm me or send via support.blackhatworld.com any screenshots and source code you can.
 
Sorry t0mmy

You caught a one in a million (buy a loto ticket!) - we'd removed our funky code and put a cleaner fix in. You shouldn't be able to get into anothers inbox again.

We're still testing this new fix so any feedback apreciated. If it does happen to you. Screen shot to include clock and contents of view source on page please.

It's far from resolved lads.. if anything it's got worse.

It's been happening to me daily still.. Before I was not so worried as no one could actually get in to any PMs.. Until now

I was replying to my clients PMs and clicked on the last one assuming it was for me - it Opened but guess what.. it wasn't for me, I was logged in as someone else again but this time I could read their PMs!

Now I am worried as I was assured PMs could not be read, but as you can see they can...

***mod edit: screenshot removed***
 
It was great honour to work with DD :) DD was working a lot to fix the bug and now it has been Fixed

Cheers!
Cyriac =))
 
Just found out I am t0mmy now. ;)

Mod edit - send screen shots and view source to support.blackhatworld.com please.
 
Thought we had it totally fixed. please send screenshots and viewsource of page to support.blackhatworld.com along with time code on your machine so we can track it back.
Thanks.

Just found out I am t0mmy now. ;)

Mod edit - send screen shots and view source to support.blackhatworld.com please.
 
Just found out I am t0mmy now. ;)

Mod edit - send screen shots and view source to support.blackhatworld.com please.

You lucky SOB.. just kidding lol Where you able to read PMs like I did?

Hope this is fixed soon. I have not seen any myself since that last one.
 
The Hacker was the only report in the last 6 hours (still waiting on those screen shots).

I think we've got it sorted. As mentioned earlier in this thread T0mmy that was a Euro millions shot. But still shouldn't have happened.
 
It is happening to my account to. See this screen: ***Mod edit - reports to support.blackhatworld.com with screen shot showing time stamp and view source of page - please ***

I have seen the inbox for multiple users on BHW.

Is our data safe?
 
The Hacker was the only report in the last 6 hours (still waiting on those screen shots).

I think we've got it sorted. As mentioned earlier in this thread T0mmy that was a Euro millions shot. But still shouldn't have happened.

Yeah I've got my Friday's Euro Millions ticket lol...It just happened to me again there now I became "financeguy" - this one caught me off guard because he uses the grey/white theme and I was switched to that like "what the hell" then looked up at the username.

Details sent to support.

EDIT - Here is some info I just noticed which might help - the last thing I did was click in to http://www.blackhatworld.com/blackhat-seo/white-hat-seo/775056-7-ways-get-high-quality-free-content-your-blog.html thread (you can see in the screenshot I sent support).. where I just noticed the guy I changed to was the last person to reply on the thread.
 
Last edited:
Thanks guys -

We're working on this. We have 99.999% of this covered, but there remains a quirk that we're tracking down right now.

As per op the security token stops all (explained above).
 
Status
Not open for further replies.
Back
Top