Like SystemiConnectFri 15 Oct 2021, 04:50
Auto Save MessagesLGforumFri 26 Feb 2021, 13:31
New tutorial questionTheCrowMon 15 Feb 2021, 08:12
Support iOS Emojis (and other platforms)LGforumSun 14 Feb 2021, 01:25
LGforum (2806)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Mr.Easybb (1587)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Bloodbath (745)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Rukiafan (533)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Dom (513)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
puppycheese (446)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
pedro (330)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Neymar (301)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Hitsu (281)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 
Flora (275)
Log out from all tabs at once. Vote_lcapLog out from all tabs at once. Voting_barLog out from all tabs at once. Vote_rcap 


Log out from all tabs at once.

avatarGuest
Tue 14 Apr 2015, 11:07
Hi,

I just noticed something very strange using FireFox. When logged in and opening several tabs to the same ws, if I choose to log out from one tab, I still seem to be logged in at the same ws from the other tabs opened to that ws in the same topic. Even when the tab using the log out option has been closed, one still remains sort of "logged in", being able to watch the topic from another one. How can I force a user to log out when one chooses to log out on my ws from all tabs all at once or better still: when logged out, close all the other tabs related to my ws as well? I don't know if that's the case when a user gets banned, but this seems to be a serious FM bug of some sort, or at least a silent one nobody reported or noticed yet in all those years. Btw, it's a phpBB3 forum I'm talking about. Anyone tested it yet on other platforms? Any confirmation on this?

The sequence:
- Open a tab, log in to a site (that's the index page you're looking at, right?) <-- TAB 1
- Now, open another tab, go into a topic <-- TAB 2
- Log out using TAB 1
- Now, look at the TAB 2, even when refreshed (not confirmed yet) or going back and forth pages, it still let's you be in it Rolling Eyes <-- That's not right!
- Go back to the ws using a new tab and see who's online. You're logged out! No trace of any member 'hiding behind the wall' <-- That's very odd behavior for a ws and compromising security!


Samantha.
BloodbathBloodbath
Status : No status yet...

Posts : 745
Join date : 2013-05-31
Age : 28
Tue 14 Apr 2015, 15:44
If you log out on one tab, you will get logged out on all tabs after you refresh.

Forumotion uses SESSIONs (yes, capitalized) which work until the browser window is closed, in combination with cookies (cookies taking precedence).

The cookies are only checked once though, so that's perfectly normal.

You could poll your website every half a minute for a change in cookies, but a log out will inevitably occur for the users -- they cannot change pages or even post in the chatbox after they log out.
LGforumLGforum
Status : Working to restore AWC!

Posts : 2806
Join date : 2011-10-05
Age : 30
Location : UK
Tue 14 Apr 2015, 20:06
Bloodbath is right.
Each tab that you have open with the same website is still the same SESSION, and you are identified as the same person/browser/login/session.
If you logout in one tab, the website terminates your SESSION and starts a new one for you as a 'Guest'.

If you refresh the second tab you'll now be logged out... if after refresh you are not logged out then that will be because you have been 'Automatically logged back in' due to choosing that option upon original log in.

Hope that makes sense! Smile
avatarGuest
Tue 14 Apr 2015, 20:13
Thanks. Still it seems a bit strange to me to be able to view a topic when logged out, even to be able to view different pages within it (the box to auto log in wasn't checked by the way). Is there a way to prevent this or have all tabs for that website to be closed? And when a user is banned from a forum is that user still being able to view that topic when having an open connection to that website? I mean, the user is logged out when banned, right, but I suspect it will behave the same way.
LGforumLGforum
Status : Working to restore AWC!

Posts : 2806
Join date : 2011-10-05
Age : 30
Location : UK
Tue 14 Apr 2015, 20:30
Well they aren't really viewing the topic. They're only viewing the page which was loaded when they were logged in. If they refresh they'll be logged out therefore won't be able to view the topic (if its a members only topic) and therefore won't see any new posts in that topic. So there isn't any real issue; all they are viewing is an already loaded page.
avatarGuest
Wed 15 Apr 2015, 08:59
Thanks LG. I understand. Yeah, to me it IS kind of an issue though. Look, I don't wanna make this topic sound like a courtroom or anything, but I've got a serious problem with that because of certain member groups being able to view certain sections only on my boards (like clan sections). When a member is banned or logged out or anything, he or she will still be able to view that topic and cause havoc by making screenshots and put them on the net abusing the ability to do so using the example I've put forward. It happened before on my other ws when there was a Mario Kart Wii clan war going on early 2014 and I now better understand the source of it all. I just happen to know it did occur to some other Italian, Australian and American sites as well and because I'm still in contact with one of the Italian founders of a MKWii hackers forum we discussed this problem very recently, so it's not just me.

So all I ask for is some kind of solution to take that ability away and force people to log in again to be able to view any topic again, like closing down opened tabs and whatever creative solution to that pops up in anyone's mind.

Thanks in advance.

Sammy (and K&K who are currently in the garden playing. It's a beautiful sunny day in The Netherlands!)
LGforumLGforum
Status : Working to restore AWC!

Posts : 2806
Join date : 2011-10-05
Age : 30
Location : UK
Wed 15 Apr 2015, 09:58
I'm afraid there is no solution to controlling someone's browser. (Well you can but not in the way your hoping).

If you give them access to these group areas though, what's stopping them from taking screenshots at any time when they are in that group area? Or even writing down the content? Copying the content? Saving the content on to their computer?
Also, if you ban them without warning then they won't have time or even think about opening another tab.

The only possible solution is to stick an auto-refresh or timed check that the user is logged in on the pages.
That way, if they are banned, the page will be refreshed at some point. However an auto-refresh is extremely irritating for your members and I strongly advise against it. A timed checking of their logged in status would be extreme overkill, like using NASA equipment to check your emails.
avatarGuest
Wed 15 Apr 2015, 10:07
LGforum wrote:[quotelink="http://www.avacweb.com/t2399-log-out-from-all-tabs-at-once#22989"]I'm afraid there is no solution to controlling someone's browser. (Well you can but not in the way your hoping).

If you give them access to these group areas though, what's stopping them from taking screenshots at any time when they are in that group area? Or even writing down the content? Copying the content? Saving the content on to their computer?
Also, if you ban them without warning then they won't have time or even think about opening another tab.

The only possible solution is to stick an auto-refresh or timed check that the user is logged in on the pages.
That way, if they are banned, the page will be refreshed at some point. However an auto-refresh is extremely irritating for your members and I strongly advise against it. A timed checking of their logged in status would be extreme overkill, like using NASA equipment to check your emails.

1. Well, nothing really, and that's exactly where the shit's hitting the fan;
2. Hmmnm.... so what you mean is when I ban them on username or better still to me: IP, they won't be able to? I didn't test it yet, but I'll take your word for it;
3. I like that last resort solution you've taken me on to. Will this also mean it'll check if someone's still logged on in chat? I'm not sure about the effects, but a 1 min or so refresh would be sufficient. And heck yeah, always looking for the best of the best, especially when it involves security (well now you know me!), NASA all the way! YAYAYAAAY! Smile I love them launching probes and going to Mars and sending people out into space. It's my better half if you consider my genes. <3 ya! Wink Uhm... I just thought of this... this means also refresh their pages when replying? That won't be no good, right? So what about a legit log in check and have the rest be "taken offline to my ws" all together or so? Darn, with all and due respect... is there any solution to this? :/

EDIT: See your point now, LG. No use. Darny darn. This is a real design flaw in my eyes. Sad, but true. I accept your response. So if anyone can please provide me with some half-way example, I'll be looking into it.... *darn*..... Why?
LGforumLGforum
Status : Working to restore AWC!

Posts : 2806
Join date : 2011-10-05
Age : 30
Location : UK
Wed 15 Apr 2015, 10:33
Well it's tough really, my best answer is there is no good solution. Only solutions which could also affect the experience of the "good" members. Which of course is not what we want.

The crux of it is that there will always be people who will misuse or abuse the privileges they are given. That's why there are such things like "Leaked nudes" or "Leaked Game of Thrones episodes" on the internet, because someone had access to them and being a bad person, abused that access.
You've basically been presented with the same issue, how do you know the people you give access to are trustworthy enough to have access? The reality is you don't.

The best way forward is to set guidelines and/or even policies in place for this type of misconduct. Lay down a set of standards and then treat all members consistently in order for those standards to be respected. The number of potential "leakers" will drop and drop until its once in a blue moon, and if you currently have very little to no issues with this already then, I'd say you've got nothing to worry about. Smile

Hope I've been of help despite not giving a full solution. Smile
avatarGuest
Thu 05 May 2016, 05:22
Solved and archived.
Sponsored content