User Cannot Log Out

[Alastor]

I am trying to trouble-shoot my boards.

It appears that I have a user or two that cannot be logged out.

I will be logged in as that user, and then finish the task at hand. I click on "Log out" and the appropriate scripts all run. It shows me as logged out. However, as soon as I return to the board index I am logged back in again.

In other words, I cannot log this user out.

I can log in as someone else if I click on "log out" and immediately log in as someone else, but then the problem reproduces itself and I am stuck as logged in as the second user now.

I need to be able to log my users (and test accounts) out.

Any help?

3.6.5 is my version.

[Alastor]

This problem appears to only pertain to IE. In my firefox browser, it's working just fine.

[Alastor]

Heh, this is weird.

Okay, so the user in question is GOONw. I log in with GOONw and do my thing. Then I go to log out. I get the confirmation screen but then when I return to the main index (which should block my view and treat me as logged out), I am still logged in as GOONw.

So what I did is click the logout button, which immediately lets me input a new name. I logged in as a different user and traversed the boards no problem. This user's name was Pandemic.

Then I made a post with Pandemic, and it recognized it as such showing that the system wasn't confusing the two accounts. So then I log out.

Pandemic does indeed log out. I then clicked on the index link which should return me to the main index and block my view, and I am suddenly logged back in as GOONw again.

I thought I'd give a more elaborate explanation in light of the new information.

[Alastor]

And another update.

So I went ahead and logged back in with my admin account and changed GOONw's password. When I changed the password, I then logged back in as GOONw. I then logged out and returned to the index.

This worked correctly.

If I returned the password setting to what it originally was however, the problem came back.

[Alastor]

In other words I still need help, in case this happens to another user.


This user would like to put their password back as well.

[Steve Machol]

My recommendation is don't use that password.

[Alastor]

My recommendation is don't use that password.

Isn't it a bit of a security issue for my users if it's happening to other people? We were completely unaware of the problem and thought this user had been logging out until I noticed it today.

It's probably not the only user it's happening to, so rather than dismiss it I'd like to find out the source and correct it if possible.

I consider the fact that my users think they are logged out when they're not to be a security vulnerability, especially since VB gives them the logout confirmation screen. I don't think it's very responsible for me to neglect this obvious and wide-open vulnerability.

[Steve Machol]

Since it happens with that password, then there would seem to be something wrong with it, possibly an strange character. Either that or you have installed an add-on that is causing this.

If you do not want to try a different password, then the next step it to upgrade to the latest version of vB and remove all mods.

[Alastor]

Since it happens with that password, then there would seem to be something wrong with it, possibly an strange character. Either that or you have installed an add-on that is causing this.

If you do not want to try a different password, then the next step it to upgrade to the latest version of vB and remove all mods.

The password consists of standard alphanumeric characters only, and I run no add-ons.

Upgrading right now is not an option as I believe my upgrade license has expired, though I do plan to renew it shortly.

All the same, I tried this same password on other accounts and the problem is not replicated with other account names, just this one (that I was able to reproduce it with).

I also tried other browsers with this account and password, and it's not replicated then either. It seems to be isolated to this account, this password, and IE.

But it's all alpha-numeric, and I don't run add-ons specifically because of the impacts it can have to my support options.

I'd be happy to give you the account name and password, along with the URL to my boards so you can check it out.

But it's a standard password, and no add-ons.

[Steve Machol]

I do not see how that can happen with a standard password and no add-ons. The next step is to upgrade as I said previously. Then if you have the same problem with the latest version of vB, fill out a support ticket at:

http://members.vbulletin.com/membersupport_contactform.php

Please include a complete description of the problem and be sure to include the login info to your Admin CP, phpMyAdmin and FTP in the 'Sensitive Data' field.

[Alastor]

I won't have the money to renew my upgrade license until the end of September. I'll go ahead and open a support ticket now, however.

Thanks, Steve.