Members logged in as other users

[besttherapy]

Hi,

have noticed something strange with logged in users.

It seems that only one user is logged in and the other users assume this login!

eg:

User A logs in, can aacces protected content

User B attempts to log in, wrong password, login fails, however can click on link to protected content and content displays – but logged in user says “User A” (visible via the fancy login widget in sidebar)

Obviously this is a bit f an issue as someone can easily bypass login if they know direct links to protected content.

Using emember 5.4.3

thanks

[besttherapy]

Further to 1st post, checking the wp_authPsession_tbl I find multiple instances of login / sessions for 1 user. If I delete all rows (using PhpMyadmin) from table, i would expect that the user would not be able to get access again without re logging in….

However this is not the case. Even with the auth table completely empty I can click a protected content link and the fancy login widget tells me I am logged in as another user…

help!!

[amin007]

Nope, this can’t happen. How are you simulating User B and C? From the same computer?

[besttherapy]

hi there,

it is certainly happening, both from same computer using different browsers, ie IE and Firefox and between different computer. I am picking up logins from other users on completely different computers / ip addresses etc.

Are there any PHP settings on our host that could cause this weirdness?

I can email you login id’s etc and sample URL’s so you can replicate.

Thanks

[amin007]

Will send you an email so that I can take a look at your server.

[besttherapy]

Many thanks to Ivy for the prompt and helpful reply, looks like you were right on about conflicts with WP-Super-Cache.

Thanks for the great tech support and for keeping this such a great membership plugin!

cheers

[Author]

Posts