No password required?

[Frank&Earnest]

Something strange is happening: I have logged off many times but the Bulletin Board has not logged me off. It still seems to think that I have been on a continuous session since 3.39 pm today. When I come back to the forum I do not need to enter the password again. Have I inadvertently changed some setting? Should this be happening?

[bsrlee]

It is saving a 'cookie' of your I.D. on your computer. When you select the site, it sends your I.D. & password for you.

To stop this you have to: clear out your cookie files in IE or Firefox, or whatever browser you use. Ditto the history file.

Then when you get to the log in screen, make sure the 'remember me' box is NOT checked (OK it might be called something else)

Thirdly, select not to accept any cookies in the Internet security section of your browser - this will however stop you using a lot of sites, such as on-line banking & credit cards as security programs store a one use cookie with a unique code every time you log on (DAMHIK).

[Frank&Earnest]

Thanks bsrlee. I thought I already was on the "no cookies" setting, which means that this is what has changed. I do not remember changing it, so I must have done it unadvertently today unless somebody else has "done" it for me. Can't really see how I could have, though. Is it possible that my computer has been hijacked in some way?

[joe greiner]

Are you actually logging out from the forum? I.e. not just exiting or logging off your browser or ISP connection? Whenever I log out, I get a message saying "all cookies cleared." Seems to be built in to VBulletin, as I get the same on other forums.

If I don't log out from the forum, my login is preserved, even though I might disconnect and shut down the computer. Sometimes when traffic is especially heavy, I can't log out because the message doesn't show. Have to come back a few hours later just to log out.

Joe

[Frank&Earnest]

Hi Joe. What you say is true, but if you do not allow cookies to start with, manually logging off does not matter. As soon as you leave you have to log in again when you return. Anyway, the problem is now fixed, I am still a bit worried about what happened yesterday.
Cheers
Frank

[Jedo_03]

same thing been happening to me for the last 2 or 3 days...
already logged on...
wondered if i'd inadvertantly pushed the "keep me logged in" button..
BUT
came on tonight - and had to Log in...
cheers
Jedo

[bsrlee]

Another thing I have noticed - some dodgy cookies & ad-ware are specifically targeting the Mozilla/Firefox browsers - seems enough people are giving IE the flick that it is seen as worth the trouble. First one I found because it wouldn't let me update Firefox, but it was fairly simple to root out - just rand a couple of adware removers in 'Safe' mode.

[Jedo_03]

came on tonight - and didn't have to log on...
Jedo

[Frank&Earnest]

Now, this is even stranger.

1) Logged off 4.05 pm today - message tells me all cookies have been deleted.

2) Return on line around 9pm. Give a look around the forum without logging in.

3) See in the forum titles that Wild Dingo has posted in the women's forum. Go into that thread with the intention of making a joke about a dingo among the chicks:D. Still not logged in. While in there see a link to "Apricots thread".

4) Follow the link. The page opens and the system recognises me. I am now logged in. I navigate to this thread and click "post reply".

5) I write this message. The other page, still open, indicates that the system does not recognise me.

6) Send this message. I will close this page and repeat the process for confirmation.

[Frank&Earnest]

Back here. Roamed around following links in threads. Some open a page where I am recognised. Some do not. Returned to the same link mentioned before, same thing happened. Anyone using my computer could go on the forum as being "me". Not a problem in my circumstances, but a system problem nevertheless.

Could the system administrator please look at what is different about this link and some other links and fix the problem? Thanks.

[achille]

G'day all,

same thing with me and I have not changed anything!!

[DJ’s Timber]

Have you signed in somewhere, where you couldn't view some pictures as it has said that you weren't signed in but you were. For example you normally log in using the www.woodworkforums.com but clicked a link which lead you to www.woodworkforums.ubeaut.com.au where you had to sign in again to look at the pictures and you have then signed out. This is where it gets tricky, you will still be signed in on one url but not the other, which is what it sounds like here.

Since the upgrade, Neil has made it that you need to be signed in to see the pictures and because some of us, use one url while some others use the other, it will require us to sign into both to see some pictures.

Am I close or not?

[Frank&Earnest]

Thanks, DJ, it was the other way around, but you are right, the first url still has me logged on. Quite messy, isn't it? Can't it be helped? How do I know at the end of a session if I am still on after logging off?

[DJ’s Timber]

Basically you need to sign out of both urls by visiting each one or clear your cache of cookies

[Neil]

Also if you are using Opera or Firefox it could be in the cache memory of the browser rather than the cached memory for the forums but DJ's definitely right.

Stupid question, but why do you need to log out of either. If you just close down or leave the forums you are automatically logged off until you come back on again. This way you don't have to log on each time and from what I understand it all runs faster and smoother for you.

There are no sinister cookies or anything else nasty or evil etc connected to these forums. We have gone to extraordinary lengths to protect our members form all that. We have even made it virtually impossible for members to be spammed or contacted other then through forum channels and all contact info is kept in the strictly and highly confidential.

If anyone gets any nasties from the forums it will be because you have put a web site link, email address or some other contact on the forums which is an open invite to those who would work the system.

Even our PM and internal emails have been cut back to 1 every 4 minutes as a major deterrent to anyone who would abuse the system. Actually came about because some were abusing it.

[Big Shed]

Stupid question, but why do you need to log out of either. If you just close down or leave the forums you are automatically logged off until you come back on again. This way you don't have to log on each time and from what I understand it all runs faster and smoother for you.




Neil, as I understand it that is not correct, even though until recently I was under the same impression.

Another forumite (Mini) checked a couple of nights ago whether I was on the forum, forum told him I was, so he sent me a PM. He didn't get an answer till the following morning, mainly because I was safely in bed and both computers switched off! Same thing last night.
When I come back on the forum in the morning, the forum knows exactly when I was on last, however when he checks whether I am on line, the forum tells him I am even though both my computers are switched off.

[DJ’s Timber]

BS from my understanding, the forum keeps you logged in for an hour from the last visit unless you log yourself out, once that hour is up you are automatically logged out.

I never log out from my laptop or home computer, except for my parents and a friend's computer when I am visiting down in Melbourne when I can't be bothered getting the laptop out and setting it up and can say, like Neil has said there is no reason to log out, I have never had any problems, in fact it's better because everything is ready to go as soon as I open the browser.

The only time you would need to log out is when you're using someone else's computer or when you're using an public one such as in a library or an office and then you shouldn't need to because you will have cleared the cookie and cache before leaving that computer as you should, unless you want someone else seeing where you have been.

[Frank&Earnest]

Also if you are using Opera or Firefox it could be in the cache memory of the browser rather than the cached memory for the forums but DJ's definitely right.

Stupid question, but why do you need to log out of either. If you just close down or leave the forums you are automatically logged off until you come back on again. This way you don't have to log on each time and from what I understand it all runs faster and smoother for you.

There are no sinister cookies or anything else nasty or evil etc connected to these forums. We have gone to extraordinary lengths to protect our members form all that. We have even made it virtually impossible for members to be spammed or contacted other then through forum channels and all contact info is kept in the strictly and highly confidential.

If anyone gets any nasties from the forums it will be because you have put a web site link, email address or some other contact on the forums which is an open invite to those who would work the system.

Even our PM and internal emails have been cut back to 1 every 4 minutes as a major deterrent to anyone who would abuse the system. Actually came about because some were abusing it.

Thanks Neil, I am sure that you are doing the best possible in this regard and, indeed, the problems caused by this setup should be minor, including what Big Shed said. Once known what the cause is, it is not a big deal to protect ourselves from the minor additional risk as DJ explained. (Thanks, DJ) I understand that the benefit of overcoming this is not likely to justify the cost of combining the url's.

[Frank&Earnest]

BS from my understanding, the forum keeps you logged in for an hour from the last visit unless you log yourself out, once that hour is up you are automatically logged out.



DJ, there could be a bit of confusion here. If by "logging out" you mean clearing the cookies and needing to log in again when you return, this is not the case. What intrigued me to start with is that what you say (actually, I think it was much less than one hour) was certainly in place before the last changes, so I never felt the need to log off myself.

Since the last change there is no time out period, as you can see by the system letting you in and telling you that "you last visited" days ago.

As regards everything else you say, totally agree. Of course, there is still the small problem of the additional exposure in the remote instance of malicious software being introduced through the server, notwithstanding all the best security precautions, but that is for each of us to evaluate against the benefit of faster access.

Thanks again.

[DJ’s Timber]

BS from my understanding, the forum keeps you logged in for an hour from the last visit unless you log yourself out, once that hour is up you are automatically logged out.



Just to be clear here, when I say automatically "logged out", I mean to say that the forum logs you out as inactive till you reopen your browser which will then automatically relog you as active.

If you look thru the "Who's Online" from the "Quick Links" dropdown menu, it will show active members as online for up to an hour from their last visit.Once that hour is up they disappear from that list

[Big Shed]

BS from my understanding, the forum keeps you logged in for an hour from the last visit unless you log yourself out, once that hour is up you are automatically logged out.

I never log out from my laptop or home computer, except for my parents and a friend's computer when I am visiting down in Melbourne when I can't be bothered getting the laptop out and setting it up and can say, like Neil has said there is no reason to log out, I have never had any problems, in fact it's better because everything is ready to go as soon as I open the browser.

The only time you would need to log out is when you're using someone else's computer or when you're using an public one such as in a library or an office and then you shouldn't need to because you will have cleared the cookie and cache before leaving that computer as you should, unless you want someone else seeing where you have been.

Well, that explains it then, because Mini checked whether I was online within an hour of me switching the computer off.

Like you, I never log off (unless on someone else's computer), as I was under the impression that it wasn't necessary, which has now been confirmed. Just didn't know about the hour.

[Chris Parks]

BTW I wish to dispell any thoughts that I am checking on people. There was a good reason to know if Big Shed was on line and it had nothing to do with the forum. We have a private chat system between us and it was telling me Fred was off line and the chat system was telling me he wasn't and I wanted to confirm what was going on.

[Barry_White]

I am at the moment using my brothers two computers and the first day I logged in I purposely didn't check the remember me box because I didn't want the cookie on my brothers computers but the computers have remembered me for the last four days. One is using Firefox and the other is using IE6 so something has changed.

[Frank&Earnest]

Sorry to insist, but there is still something wrong here. I refrained from mentioning it again in the past couple of days because I was worried that I had forgotten to log off properly and wanted to be sure not to make a fool of myself.

Logging off works during the day, but when I log off at night and come back on line in the morning, the system has me as logged in. The only logic explanation I can come up with is that there is a daily backup procedure sometime in the early hours of the morning that incorrectly restores cookies.

Quite likely not malicious, but still a system problem I believe.

[Stuart]

I have tried to duplicate your problem, but for the life of me - can't.

I cleared all personal data from Firefox, and logged out which cleared the cookies. Tried reentering the URL(s) (remember there is more than 1 possible one to use to access these forums), tried rebooting, tried each different way that I normally use to enter the forums, all either showed me as a guest, or refused entry (the administrator-only areas).

The only thing that did occur was my browser filled in my Username and Password ready for me to log in, as I have these saved in my browser's "Remember Passwords For Sites" option.

So as far as I can tell, the problem is not at the server end.

[wheelinround]

Have you turned off the "Remember Password For Sites" in Firefox under the Tools>Options>Secuity Tab

Just a thought I haven't read the full post suggestions:no:
If it has been suggested I appologise in advance:roll:

[Stuart]

Think someone around here might have mentioned it ...... :rolleyes:

[wheelinround]

Think someone around here might have mentioned it ...... :rolleyes:
Should have read your post Stuart I just glanced
and well checked mine out then posted
The honour is all yours sir

[Frank&Earnest]

I have tried to duplicate your problem, but for the life of me - can't.

I cleared all personal data from Firefox, and logged out which cleared the cookies. Tried reentering the URL(s) (remember there is more than 1 possible one to use to access these forums), tried rebooting, tried each different way that I normally use to enter the forums, all either showed me as a guest, or refused entry (the administrator-only areas).

The only thing that did occur was my browser filled in my Username and Password ready for me to log in, as I have these saved in my browser's "Remember Passwords For Sites" option.

So as far as I can tell, the problem is not at the server end.
Stuart, nothing of the above disproves my hypothesis. At what time is the server backed up? Try ensuring that you are logged off before that time and do not try to log on until the next morning. If the system thinks you are logged on then, you have duplicated the problem. If it does not, there is still the possibility that a software glitch in the backup procedure is affecting only a certain part of the database that includes me and not you.

Anyway, not to waste your resources unnecessarily, just let me know if after that you still can't reproduce the problem, and I will get somebody to sort out my end beyond doubt before making further suggestions. BTW, I only use plain vanilla Microsoft software with CA virus protection, no fancy firewalls etc.

If anybody else besides you reproduces the problem in the meanwhile we both have saved unnecessary work.
Thanks
Frank