Login still possible with old cookies

[Jack_Ian]

I can still log in to "get a clue" after someone has changed the password, once I have previously logged in successfully and checked on the "Log me on automatically each visit:" checkbox.

_{IE:Mac 5.2.3 (5815.1)
Macintosh; U; PPC Mac OS X 10.3.9 Mach-O; en-GB; rv:1.7.12}

(Edit: Changed browser info, since the problem occurred using IE. I normally use FF but keep IE around for logging in under other usernames)

[MatthewV]

I heard that the newest board update allows you to log out while in FireFox. I don't know myself so don't blame me if IE hears that you might stop using it and kills your computer with Microsoft Gremlins.

[Antrax]

This should not be possible at all. I will test this. Obviously, if this is true, it's a serious bug in the new cookie structure in 2.0.18
_________________
After years of disappointment with get rich quick schemes, I know I'm gonna get rich with this scheme. And quick!

[get a clue]

Jack_Ian here, although Thok is now the current "get a clue", and before that "Victoria Solverwolf".

Cookie Info:
Name: phpbb2mysql_sid
Server: www.greylabyrinth.com
Path: /
Value: 941fa17ee99506d773f0d6b5306c2b84
Expires: This session
Secure: No
Ststus: Enabled

Name: phpbb2mysql_data
Server: www.greylabyrinth.com
Path: /
Value: a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3B
Expires: Thu 23 Nov 2006 21:40 GMT
Secure: No
Ststus: Enabled

Name: phpbb2mysql_t
Server: www.greylabyrinth.com
Path: /
Value: a%3A2%3A%7Bi%3A3746%3Bi%3A1132782359%3B
Expires: This Session
Secure: No
Ststus: Enabled

Edit: Just realised that the Cookie Value might not be complete, judging by the values shown in FireFox.
I think the value shown might be truncated on IE.
I'll post again if I get the full info.

[BeMyGuest]

Jack_Ian here again.

I located where cookies for IE are stored on OS X but unfortunately they are not in human readable form.
So here's what I did.

In FireFox, logged on to GL with the UserName "BeMyGuest" (PW:BeMyGuest)
Changed PW to "BeMyGuessed"
Closed FF.

In IE logged on as BeMyGuest and set PW back to original.

Started FF again and was logged on automatically as BeMyGuest even though the PW was changed in the interval.

Now since the problem is also in FF, I can show you the complete cookie info.

Cookie Info :

Name: phpbb2mysql_t
Content: a%3A1%3A%7Bi%3A8897%3Bi%3A1132787477%3B%7D
Host: www.greylabyrinth.com
Path: /
Send For: Any type of connection
Expires: at end of session

Name: phpbb2mysql_data
Content: a%3A2%3A%7Bs%3A11%3A%22autologinid%22%3Bs%3A33%3A%2213111541684384f707b708b2.83387678%22%3Bs%3A6%3A%22userid%22%3Bi%3A2010%3B%7D
Host: www.greylabyrinth.com
Path: /
Send For: Any type of connection
Expires: Thu 23 Nov 2006 23:11:02

Name: phpbb2mysql_sid
Content: aa3e4d0cf028ca731d1bf8afd036eb5a
Host: www.greylabyrinth.com
Path: /
Send For: Any type of connection
Expires: at end of session

[yada*]

[yada*]

[Samadhi]

??
_________________
And he lived happily ever after. Except for the dieing at the end and the heartbreak in between.