vBulletin

Thank you for visiting. This is our website archive. Please visit our main website by clicking the banner above.
vBulletin FAQ is dedicated to helping the forum owner build, manage and profit from his vBulletin Forum
vBulletin Web Hosting - Free skins and styles for your vBulletin - Search Engine Optimization




Urgent re Security

Biggles LLB
04-27-2006, 03:16 AM
I think this is the right forum for posing this question. If not, I do apologise.

Having disabled invisible mode for all registered users, how is it possible for one, just one, registered user (someone who is causing difficulties with other members), to come on site, appear in the Who's Online while posting PM, but disappear immediately from Who's Online when leaving the site?

Is there some way a member can do this?

I have the Who's Online set to record all visits for 24 hours at present to collate info and evidence on this particular member. It seems she has found a way to pop on, send PMs, and then disappear when all others cannot, including spiders.

What am I doing wrong? Or is this something one cannot fix?

Biggles LLB

Noppid
04-27-2006, 05:02 AM
They logout and clear themselves from the sessions table and are gone.

Peggy
04-27-2006, 05:59 AM
How does one clear themself from the sessions table?

Biggles LLB
04-27-2006, 07:41 AM
Yeah, how does a user clear the sessions table ... and how do they actually do that in practice? Is it just clearing cookies or what? Do they need specialist skills like noppids or can anyone do it?

Biggles LLB

Peggy
04-27-2006, 08:04 AM
Interesting... I'd really like to know.. because most people on my site, when they log out, their username remains in the WOL box for 15 minutes or more before disappearing

Biggles LLB
04-27-2006, 08:22 AM
Interesting... I'd really like to know.. because most people on my site, when they log out, their username remains in the WOL box for 15 minutes or more before disappearingYes indeed, Ohio, and if you set the Cookies and HTTP thingummyjig in your ACP to 86400 seconds instead of 15 minutes (900 seconds) then you'll keep all visitors (and guests if you want) displayed in the WOL for a full 24 hours.

Very useful if you are keeping an eye on a potential troublemaker - unless they can find a way around that, which is the purpose of my question here. It seems noppid knows the answer but doesn't want to share it with us all. Hmmm ... :eek: Come on noppid. Give it up mate. :D

Biggles

Noppid
04-27-2006, 11:05 AM
If they click the logout button and they don't have javascript off, IIRC, the vB backend removes them as logged in from the sessions table.

At least in my forums. But I don't have 25 styles that may not have the proper javascript in them. I have one style and it is 100% vB 3.5.4 verified. If you have custom styles, you may not have the javascript necessary or could have old javascript.

It works as I described here when I logout too.

Peggy
04-27-2006, 11:47 AM
The main style on my site is a custom style designed by John, who designed this one. I'm removing most of the other styles (and there aren't 25 as you well know, silly man, lol), but at any rate... even when I had only the ONE style, it did the same thing.

Noppid
04-27-2006, 12:40 PM
The 25 five joke was at you, but the rest is in general.

In any event, it should do as I described. Maybe it does it a little different then I say, but the end result is the same. The user is removed from who's online upon logging out.

This does not happen when a user meerly closes the browser. There's no telling what some members idea of "logout" is. ;)

P.S. It works fine on John's style. :)

Peggy
04-27-2006, 01:01 PM
The 25 five joke was at you, but the rest is in general.

In any event, it should do as I described. Maybe it does it a little different then I say, but the end result is the same. The user is removed from who's online upon logging out.

This does not happen when a user meerly closes the browser. There's no telling what some members idea of "logout" is. ;)

P.S. It works fine on John's style. :)

I know it was sweetheart, I was cracking up over here :D

Peggy
04-27-2006, 02:21 PM
I'd still like to know how a user is able to clear the sessions table??


vBulletin

seo book

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35

EZ Archive Ads Plugin for vBulletin Copyright 2006 Computer Help Forum