Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Serious Bug in DNN 4.5.0?Serious Bug in DNN 4.5.0?
Previous
 
Next
New Post
3/23/2007 2:09 PM
 

The "Remember Me" can be changed from Goldfish to Elephant mode by setting the timeout to a longer value in the forms authentication section of the web.config.  It is only 60 minutes by default.

This seems to get reset every time DotNetNuke.com does an upgrade.

Back to the original thread. I have serious doubts that someone actually came to DotNetNuke.com and was automatically logged in as some other user, then decided to post the very first message on that account, and then to have the supposed original account holder notice it right away and say "hey someone else posted under my account".

It's a serious accusation though, so it would be nice if someone with the power to look into it would do so.


DotNetNuke Modules from Snapsis.com
 
New Post
3/23/2007 2:10 PM
 
I'm glad you finally understand. So what is the issue now? I think it is a huge problem if someone is able to impersonate as another user.
 
New Post
3/23/2007 2:16 PM
 
we need to investigate, please provide as much information as possible and send it to security@dotnetnuke.com

Cheers from Germany,
Sebastian Leupold

dnnWerk - The DotNetNuke Experts   German Spoken DotNetNuke User Group

Speed up your DNN Websites with TurboDNN
 
New Post
3/23/2007 2:24 PM
 
It is a serious accusation indeed! Why would i create a problem out of nothing. The reason why i replied almost immediately is because i received a notification email suddenly telling me that my post has been approved. It is kind of surprising at first until it came to a shock that someone else actually logged in as me by accident and posted. I do not have any details on what happened. I'm a victim not the person who invoked the bug. Perhaps the person who logged in as me should describe if he ever sees this post. From what i read he is called "Jimmy".
 
New Post
3/23/2007 3:24 PM
 

Ok, that sounds like a legit reason for the immediate response. 

You have probably already done this, but if not please change your password.

My curiosity is raised.  How long has it been since the last time you were logged in, before getting this message today?


DotNetNuke Modules from Snapsis.com
 
Previous
 
Next
HomeHomeOur CommunityOur CommunityGeneral Discuss...General Discuss...Serious Bug in DNN 4.5.0?Serious Bug in DNN 4.5.0?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out