Collarchat.com

Join Our Community
Collarchat.com

Home  Login  Search 

I've got a problem that should terrify everyone


View related threads: (in this forum | in all forums)

Logged in as: Guest
 
All Forums >> [Community Discussions] >> Perv to Perv Assistance >> I've got a problem that should terrify everyone Page: [1] 2   next >   >>
Login
Message << Older Topic   Newer Topic >>
I've got a problem that should terrify everyone - 7/14/2017 12:21:10 PM   
Strangedesires90


Posts: 1
Joined: 3/13/2012
Status: offline
When I click on the different pages, it logs me in as a different user and I see their version of the page instead.
Example:
When I click "Who's viewing me" It says "Logged in as dawndalis " and I see all of the people that have viewed her.

When I click "edit profile" Suddenly I'm Cooper1972 and all of his details and the ability to change them are in front of me instead of my own. He is also my "My account page and I can see/change his email.

"Admirers" page makes me user TNDom23

My Mail makes me MountainManCO(Who really needs to check his mail!!!)

Favorites is loveangelm.

And on and on and on.
And I think I'm actually logged in as them as well because every new page changes my notifications of viewings and mail.

Profile   Post #: 1
RE: I've got a problem that should terrify everyone - 7/25/2017 12:52:08 PM   
Lawrence111


Posts: 117
Joined: 6/10/2004
Status: offline
I find it interesting that no one has commented between 7/14/17 when OP posted and today (7/25/17).

The Ancient saying: "What did you pay for a CM/CS account? Then demand a refund and leave if you do not like it," seems to ring particularly ... odd.

I would however add my voice to the OP's. This is more than most concerning :(

(in reply to Strangedesires90)
Profile   Post #: 2
RE: I've got a problem that should terrify everyone - 7/25/2017 3:14:31 PM   
MsLadySue


Posts: 2254
Joined: 12/18/2004
Status: offline
Perhaps no one commented because most people have not experienced this problem. Even if we did, we couldn't help him. There seems to be no one supplying support for these sites and the owner is doing nothing to upgrade the outdated software used to run them. Luckily we're not paying for the use of either site.

_____________________________

In order for you to insult me, I would first have to value your opinion.
I love it when someone insults me. That means I don't have to be nice anymore.

(in reply to Lawrence111)
Profile   Post #: 3
RE: I've got a problem that should terrify everyone - 7/26/2017 1:08:22 PM   
ThatDizzyChick


Posts: 5490
Status: offline
This site is completely broken, and the guy who owns it is apparently perfectly happy with that state of affairs.

_____________________________

Not your average bimbo.

(in reply to Strangedesires90)
Profile   Post #: 4
RE: I've got a problem that should terrify everyone - 8/22/2017 7:11:52 PM   
Lawrence111


Posts: 117
Joined: 6/10/2004
Status: offline
I'll try to describe the steps to achieve this strange behavior:

- Look at a profile, the "small" view first.

- Click on the photo or click "View Full Profile", which take you to the large view, if you will.

- Note that my log-in name (in the upper right corner) is listed not as me but as someone else. This name can be the same on a consistent basis or can be someone else.

- Click on "Send photos" (which never actually works any more) to send an email to which I can attach a photo, and see my user name in the corner.

- Very strange and likely insecure ?

Sincerely,

Lawrence

(in reply to ThatDizzyChick)
Profile   Post #: 5
RE: I've got a problem that should terrify everyone - 8/23/2017 2:11:13 AM   
Cruelcontrolcpl


Posts: 2
Joined: 5/17/2013
Status: offline
Yup i can replicate and i am not versed in coding, but spent a bit of time scanning thru the source and nothing stood out to me - the random username shows up once but afaics all the user ID's match respective accounts (random user not linked there at all)

(in reply to Lawrence111)
Profile   Post #: 6
RE: I've got a problem that should terrify everyone - 8/23/2017 2:13:26 AM   
Cruelcontrolcpl


Posts: 2
Joined: 5/17/2013
Status: offline
:o

(in reply to Cruelcontrolcpl)
Profile   Post #: 7
RE: I've got a problem that should terrify everyone - 8/23/2017 2:05:00 PM   
LadyPact


Posts: 32566
Status: offline

quote:

ORIGINAL: Lawrence111

I'll try to describe the steps to achieve this strange behavior:

- Look at a profile, the "small" view first.

- Click on the photo or click "View Full Profile", which take you to the large view, if you will.

- Note that my log-in name (in the upper right corner) is listed not as me but as someone else. This name can be the same on a consistent basis or can be someone else.

- Click on "Send photos" (which never actually works any more) to send an email to which I can attach a photo, and see my user name in the corner.

- Very strange and likely insecure ?

Sincerely,

Lawrence


I can verify that this method works.


_____________________________

The crowned Diva of Destruction. ~ ExT

Beach Ball Sized Lady Nuts. ~ TWD

Happily dating a new submissive. It's official. I've named him engie.

Please do not send me email here. Unless I know you, I will delete the email unread

(in reply to Lawrence111)
Profile   Post #: 8
RE: I've got a problem that should terrify everyone - 8/23/2017 7:12:07 PM   
Lawrence111


Posts: 117
Joined: 6/10/2004
Status: offline

quote:

ORIGINAL: Cruelcontrolcpl

Yup i can replicate and i am not versed in coding, but spent a bit of time scanning thru the source and nothing stood out to me - the random username shows up once but afaics all the user ID's match respective accounts (random user not linked there at all)


Cruelcontrolcpl, I sent you a private note. You are welcome to respond.

_____________________________

Yoda, my English Teacher was.

***********

Question: What is the ONE creature that puts fear into the heart of a Gorian Warrior?
Answer: "The Beast That Eats Only Male Virgins"

(in reply to Cruelcontrolcpl)
Profile   Post #: 9
RE: I've got a problem that should terrify everyone - 8/26/2017 10:51:42 AM   
johnsteed2


Posts: 27
Joined: 3/27/2005
Status: offline
Yeah -- I noticed this problem recently myself, and sent a Support note (wondering if it was related to the "can't attach pictures" problem). As has been usual for the past year or so, no response from Support.

To be honest, in the past, I was always surprised that when I sent a message to Support, that I would get a message, given that this is a free site. But that has changed. No response to any of my Support messages about the "Profile not found" error when attempting to attach pictures, or this "suddenly you're someone else" scary issue.

(in reply to Strangedesires90)
Profile   Post #: 10
RE: I've got a problem that should terrify everyone - 9/15/2017 9:55:01 AM   
Bittenkiss


Posts: 19
Joined: 5/11/2009
Status: offline
I am beginning to think its a cache problem - when you view a profile, the site is possibly building a page to view and storing it in a cache. Then, when someone else views the profile (and nothing has changed) instead of building a new page with all the same stuff, it simply shows you the one it did earlier - from the cache. Trouble is, you get the cached display from the user who first viewed it, and their name appears int he top right corner.

I think its the site admin trying to improve the site performance and not a hack or security issue at all.

(in reply to johnsteed2)
Profile   Post #: 11
RE: I've got a problem that should terrify everyone - 9/15/2017 8:59:58 PM   
Lawrence111


Posts: 117
Joined: 6/10/2004
Status: offline

quote:

ORIGINAL: Bittenkiss

I am beginning to think its a cache problem - when you view a profile, the site is possibly building a page to view and storing it in a cache. Then, when someone else views the profile (and nothing has changed) instead of building a new page with all the same stuff, it simply shows you the one it did earlier - from the cache. Trouble is, you get the cached display from the user who first viewed it, and their name appears int he top right corner.

I think its the site admin trying to improve the site performance and not a hack or security issue at all.


So Bittenkiss, if I understand you, might the answer be something as simple as ... refreshing the page? Thanks.

(in reply to Bittenkiss)
Profile   Post #: 12
RE: I've got a problem that should terrify everyone - 9/15/2017 9:04:04 PM   
MsLadySue


Posts: 2254
Joined: 12/18/2004
Status: offline
As mentioned earlier in this thread, the owner of this site and the profile side, is NOT DOING any upgrades and hasn't done so since the name was changed to CollarSpace. He's quite content to leave things just as they are.

_____________________________

In order for you to insult me, I would first have to value your opinion.
I love it when someone insults me. That means I don't have to be nice anymore.

(in reply to Bittenkiss)
Profile   Post #: 13
RE: I've got a problem that should terrify everyone - 9/15/2017 9:12:09 PM   
DesFIP


Posts: 25191
Joined: 11/25/2007
From: Apple County NY
Status: offline
The owner is quite ill and unable to run the business. He's had offers to sell but declined all.

_____________________________

Slave to laundry

Cynical and proud of it!


(in reply to MsLadySue)
Profile   Post #: 14
RE: I've got a problem that should terrify everyone - 9/16/2017 5:59:50 AM   
Bittenkiss


Posts: 19
Joined: 5/11/2009
Status: offline

quote:

ORIGINAL: Lawrence111


quote:

ORIGINAL: Bittenkiss

I am beginning to think its a cache problem - when you view a profile, the site is possibly building a page to view and storing it in a cache. Then, when someone else views the profile (and nothing has changed) instead of building a new page with all the same stuff, it simply shows you the one it did earlier - from the cache. Trouble is, you get the cached display from the user who first viewed it, and their name appears int he top right corner.

I think its the site admin trying to improve the site performance and not a hack or security issue at all.


So Bittenkiss, if I understand you, might the answer be something as simple as ... refreshing the page? Thanks.



No, chances are the page is built on the server and stored there. Refreshing will simply fetch the same pre-built page again.

What might need to happen is for the page you're looking at to change in some way, like the user you're looking at changes their details (or possibly just wait, as the cached page might be discarded and refreshed after a set time - that's quite common).

Either way, apart from the name, it doesn't seem to be a problem. Don't put any personal details on the site if you're worried, but that's probably good advice regardless!

(in reply to Lawrence111)
Profile   Post #: 15
RE: I've got a problem that should terrify everyone - 9/16/2017 6:02:02 AM   
Bittenkiss


Posts: 19
Joined: 5/11/2009
Status: offline
Interesting - but then I did see the site being added and removed from cloudflare recently, so I figured something was being done, even if it was in the realm of networking/administration rather than actively managing the site itself.

Maybe its cloudflare that's implemented the caching then!

(in reply to MsLadySue)
Profile   Post #: 16
RE: I've got a problem that should terrify everyone - 9/16/2017 10:23:35 PM   
submgreenbay


Posts: 69
Joined: 6/2/2006
Status: offline
There were a few other quirks I noticed in the last few weeks. Clicking the View Interest tab on someones profile would log me out of the site. And some times the template stuff like the words Username, Description, etc would be in a different language.

(in reply to Bittenkiss)
Profile   Post #: 17
RE: I've got a problem that should terrify everyone - 9/18/2017 3:48:23 PM   
sexysarah


Posts: 4
Joined: 5/17/2004
Status: offline
Actually, you should be more terrified than you realize.

There's some Javascript code that's been 'infecting' people's profiles. I noticed it yesterday, but it definitely appears to be spreading. I'm not a programmer so I don't fully understand what it does, but long story short, it appears that if someone puts Javascript code within their profile, it executes when you view their full profile. So it's adding the infectious code to everyone's profiles, and also doing something with people's cookies.

I collected the details of what I found: https://pastebin.com/FXVu6N3v

Here's what it looks like in someone's profile:



...This site is a dumpster fire, and not just because of the userbase.

(Oh, and uh, also, you should have no pretense of security here. It's not an encrypted site.)

(in reply to submgreenbay)
Profile   Post #: 18
RE: I've got a problem that should terrify everyone - 9/18/2017 8:49:04 PM   
Lawrence111


Posts: 117
Joined: 6/10/2004
Status: offline
So thanks for this information, SexySarah.

As I wrote to you, would you know:

- how does one delete any malicious code that may be in one's profile ?

- Will this code do anything outside of CS, that is: are individual computers at risk?

Thanks.

(in reply to sexysarah)
Profile   Post #: 19
RE: I've got a problem that should terrify everyone - 9/19/2017 9:22:48 AM   
sexysarah


Posts: 4
Joined: 5/17/2004
Status: offline
It appears to contact some other site (or set their referral link for this other site?) But I'm not a programmer so I can't tell. But yeah this site isn't secure at all. I'd recommend making sure you use a unique password for this site.

(in reply to Lawrence111)
Profile   Post #: 20
Page:   [1] 2   next >   >>
All Forums >> [Community Discussions] >> Perv to Perv Assistance >> I've got a problem that should terrify everyone Page: [1] 2   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts




Collarchat.com © 2024
Terms of Service Privacy Policy Spam Policy

5.391