×

Notice

The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1

TOPIC: Comment security -- other user names popping up

Comment security -- other user names popping up 16 years 1 month ago #1289

  • Elizabeth Larson
  • Elizabeth Larson's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 6
  • Thank you received: 0
I have a news site with a version of Joomla Comment installed in December of 2006.

We're having a problem with people being able to go to a story's comment section and finding another user's name in the comment box. Some unscrupulous types are taking advantage of this and posting under other peoples' names, which is causing us a lot of grief.

Do newer versions of Joomla Comment fix this problem? We use an iJoomla news component and they were adamant that it was likely the fault of an extension and not their product's issue.

Comment security -- other user names popping up 16 years 1 month ago #1292

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
what do you mean with that:

on and finding another user's name in the comment box.

Comment security -- other user names popping up 16 years 1 month ago #1293

  • Elizabeth Larson
  • Elizabeth Larson's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 6
  • Thank you received: 0
A reader reported to me today that she went to read a story and at the bottom of the page, in the comments section, a comment box was open with someone else's user name in it. She hadn't logged in yet. So she left the page and came back again to try to clear it and yet another strange user name had popped up in the box. I think it's somehow defaulting to the user info of the last person to post a comment. Does that make sense? Have you seen this before?

Comment security -- other user names popping up 16 years 1 month ago #1295

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
That is nonsense. In the box must be the username of the last user logged in the site on the same PC. (if he logs off - then the box should be empty)
Did you make any changes to the code?

Comment security -- other user names popping up 16 years 1 month ago #1297

  • Elizabeth Larson
  • Elizabeth Larson's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 6
  • Thank you received: 0
Mr. Dimitrov,

First off, it's not nonsense, and second, no, I didn't change the code.

Try it yourself by following this link: lakeconews.com/content/view/5977/764/ .

I just did it and found, at the bottom of the page, someone else's username sitting there, ready to go in a comment box.

This appears to be something you've never encountered before. However, I don't think this is isolated to me, since I found another user's comment yesterday that references the same problem.

Elizabeth

Comment security -- other user names popping up 16 years 1 month ago #1299

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
Please send username and password to check it out.

Comment security -- other user names popping up 16 years 1 month ago #1302

  • Nils Haase
  • Nils Haase's Avatar
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 4
  • Thank you received: 0
Hello,

I have the same problem.
Everytime when a user is logged in, the anonymous user on the website see that username in the comments form.

You can see that on every page below www.aeroclub-wolfsburg.com/herbstlager_2008/

regards

Nils

Comment security -- other user names popping up 16 years 1 month ago #1303

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
Are you both using 3.26 or an older version?

Comment security -- other user names popping up 16 years 1 month ago #1304

  • Nils Haase
  • Nils Haase's Avatar
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 4
  • Thank you received: 0
Version 3.26! I've installed it 10 days ago.

Comment security -- other user names popping up 16 years 1 month ago #1305

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
give me link to a comment page and user name to log in!

Comment security -- other user names popping up 16 years 1 month ago #1306

  • Nils Haase
  • Nils Haase's Avatar
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 4
  • Thank you received: 0
sent PM to you... thanks for your help!

Comment security -- other user names popping up 16 years 1 month ago #1314

  • Elizabeth Larson
  • Elizabeth Larson's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 6
  • Thank you received: 0
Can I get a secure e-mail address to send the log on info to you?

I'm using an older version than Nils -- mine is 2.40.

Comment security -- other user names popping up 16 years 1 month ago #1317

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
Elizabeth 2.40 is not developed and supported from us. Please take the necessary steps to upgrade.
1. Backup
2. Backup
3. Backup

then uninstall and install 3.26.

Comment security -- other user names popping up 16 years 4 weeks ago #1326

  • Nils Haase
  • Nils Haase's Avatar
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 4
  • Thank you received: 0
Dou you get some new informations for me?
I'm using the latest version.

Thanks und regards

Nils

Comment security -- other user names popping up 16 years 3 weeks ago #1337

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
Hey there! As I saw you have disabled my account.
Is your problem solved now?
With the account you provided me I was never able to experience your problem.

Comment security -- other user names popping up 16 years 3 weeks ago #1343

  • Elizabeth Larson
  • Elizabeth Larson's Avatar Topic Author
  • Offline
  • Fresh Boarder
  • Fresh Boarder
  • Posts: 6
  • Thank you received: 0
In your last message you said you didn't support 2.40 and that I needed to upgrade. We haven't been able to do that yet. I can send you a login and password but I need a private e-mail.

Comment security -- other user names popping up 16 years 3 weeks ago #1348

  • Daniel Dimitrov
  • Daniel Dimitrov's Avatar
  • Away
  • Administrator
  • Administrator
  • Posts: 9618
  • Karma: 155
  • Thank you received: 1081
Why haven't you been able to update?
  • Page:
  • 1
Time to create page: 0.237 seconds