Mario Kart MB
https://www.mariokart64.com/cgi-bin/yabb2/YaBB.pl
Misc. >> Board Problems >> When you log in for "1 hour"...
https://www.mariokart64.com/cgi-bin/yabb2/YaBB.pl?num=1377230499

Message started by Saint Nicholas de la Harvey on 08/22/13 at 20:01:39

Title: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/22/13 at 20:01:39

...the time you're actually logged in is no more than a minute. ::)
EDIT: It's actually about 10 seconds... go figure!

I wonder about the other time frames you can choose from, whether they give you the correct amount of time, though doesn't everybody here log in for "Keeps"?
EDIT: When choosing 3 hours I was still logged in after several minutes, so maybe this and the other settings are correct.

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/22/13 at 21:08:04

Here's where the problem lies... YaBB might let you do things to accounts when you shouldn't be logged into them anymore. Such as, delete them. Another time I was able to change my displayed name. This is either a bug, or I may have just forgotten to select "1 hour" "10 Seconds" instead of "Keeps" every time I logged back in to test something.  [smiley=flush.gif]

As to why they'd give you an option to log in for just 10 seconds...  ::)

Title: Re: When you log in for "1 hour"...
Post by IsThatAGoodTime on 08/23/13 at 14:55:58

Could be just a timezone issue. YaBB sucks at timezones.

Title: Re: When you log in for "1 hour"...
Post by Nicholas de la Harvey on 08/24/13 at 06:21:08

Yes, but YaBB can still tell when 5 minutes have passed when you're in a profile session, so maybe the forum admins can fix the coding so that when you tell YaBB to log you in for one hour, you're logged in for one hour. This can be useful if you're accessing the forum from a school, library, or any other public computer, in case you forget to log out when you're through. If you're logged in for "Keeps", the next person to use the computer (like, say, the next class period) may not be able to get to your profile without knowing your password, but they can still delete your posts or access your PMs...

EDIT: There's one scenario that would worry me if I logged in from a school computer. Suppose I go into a profile session and have to walk away momentarily. Then another student sneaks behind my back and makes changes to my profile, but one hour has passed (we'll assume the glitch is fixed in this case). This will generate a Form Spoofing error. However, the profile session hasn't yet timed out when I get back. If I log back in within five minutes (presumably for one more hour), then hit Back (we'll assume I didn't know any better), and refresh the page where the spoofing error appeared...then any change the other student tried to do to my account would be made (including deleting the account).

The lesson: Don't log in from a public place  ;)

If five minutes have passed though, the session "times out" and any attempted profile changes will be discarded altogether. But within five minutes, anything can be resubmitted to YaBB if the user logs in again and tries to go back to the page they were on.
There is one way to make sure of this...  [smiley=evil.gif]

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/24/13 at 16:31:55

^ Ugh, that wasn't what was supposed to happen.  [smiley=chairshot.gif]

The account was logged out, and the session had been over 5 minutes, and it STILL let me resubmit a request to delete the account once I logged back in. [smiley=uzi.gif]
This may be related to what I mentioned above, that an account that should have run out of login time, can still possibly be vandalized.

Requests made from expired sessions should be thrown out, but in this case, it wasn't!

See? Make certain NOBODY else EVER can get on your computer if you have to walk away quickly during a profile session. Sign off first for Shadow's sake! (Literally!) The time limits on both logins and profile sessions are not infallible, at least not when the unwitting "victim" hits Back/Refresh to try to get back to the page they were on, without realizing what somebody tried to do.  ;D

...Why did I try this on my main account, as many times as I've lost it? Because if these failsafes didn't work (and they didn't indeed), then it's a real security issue that may really need to be addressed. And besides that, I've got balls.  8-)

Hell, it's better than me testing on your account, right?

Title: Re: When you log in for "1 hour"...
Post by Jamie White on 08/24/13 at 17:23:23

lol                

Title: Re: When you log in for "1 hour"...
Post by thewebinator on 08/24/13 at 18:53:40

We might need to create a "Harvey Account Problems" section different from the Board Problems section, with how often you seem to lose your account Nick  ;D

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/24/13 at 19:22:52

^ This time, in particular, it really was my fault, for being a bit too brave, but the point I'm trying to make is that YaBB's security features can in some cases be circumvented.

Title: Re: When you log in for "1 hour"...
Post by shadow on 08/25/13 at 02:12:40

It takes me 15 minutes to restore your account each time. I'm not doing it again if you're just going to delete it again. It's pointless for me to retype every single command and make sure different files have your info just for you to click a button and delete it the second I'm finished. I don't have the time every day to keep doing this. It's not a simple process for me.

Title: Re: When you log in for "1 hour"...
Post by Mr.Nosey on 08/25/13 at 03:20:58


68737A7F746C1B0 wrote:
It takes me 15 minutes to restore your account each time. I'm not doing it again if you're just going to delete it again. It's pointless for me to retype every single command and make sure different files have your info just for you to click a button and delete it the second I'm finished. I don't have the time every day to keep doing this. It's not a simple process for me.

I lol'd. Is this the first time you've told Nick that it takes this long to restore it? If so, I think you should've told him a little earlier ;D

Title: Re: When you log in for "1 hour"...
Post by Nicholas de la Harvey on 08/25/13 at 05:41:24


7B7F7D736F617E6362160 wrote:
I lol'd. Is this the first time you've told Nick that it takes this long to restore it? If so, I think you should've told him a little earlier ;D


Yeah, maybe he should have told me this earlier.  [smiley=dead.gif]

Then I would have quit the first time...

I am truly amazed in that case that Shadow actually had the patience to work on my old account as many times as he did, though. I wouldn't have... Our forum staff goes above and beyond.  [smiley=beer.gif]
I'm very, very, sorry if I wasted that much of his time though.  :(

But yeah, if I knew it took that long to fix an account, I think I'd give the poor admins a break and never even let my mouse cursor travel across that Delete User button.  [smiley=lolk.gif]
(Too bad this isn't GameFAQs where you have to write a letter to the staff now in order to close an account!)

And if I were in the admin's shoes here, I'd make sure that the careless account-deleter knows the first time I can't merely get him back up with a few clicks, and give him a good warning...  

At any rate, it's about damn time I finally got put in my place ;D

Once again, I apologize to Shadow and anyone else involved in this. But I am not going to beg and plead for forgiveness...

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/26/13 at 00:44:23

I logged in for "1 hour" from my 3DS minutes ago, and I'm still logged in! It must have to do with the browser...
Maybe IE8 (which I normally use) interacts with YaBB in a way that causes the glitch.

EDIT: Wii browser seems to handle this option properly as well.

Tried IE8 again, thought maybe the bug was fixed, but it still happens there.

Title: Re: When you log in for "1 hour"...
Post by Mario86 on 08/26/13 at 07:26:33

Two questions:

1/ Why don't you just log as "keeps" ?
2/ Why IE8?

Title: Re: When you log in for "1 hour"...
Post by Yoshistar™ on 08/26/13 at 09:59:32

^ No problems with it here as well via Wii :)

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/26/13 at 11:33:11


765A495254030D3B0 wrote:
Two questions:

1/ Why don't you just log as "keeps" ?
2/ Why IE8?


1. I usually do. I just wanted to use "1 hour" to test it.
2. I have always used IE8 since I've had this computer.

Title: Re: When you log in for "1 hour"...
Post by Mr.Nosey on 08/26/13 at 14:43:05


7E5953585F5C51436F785142465549300 wrote:
[quote author=765A495254030D3B0 link=1377230499/0#12 date=1377530793]
2/ Why IE8?

2. I have always used IE8 since I've had this computer.[/quote]
This isn't an answer to his question. What you've done in the past is an action, which you've taken because of a reason. I will guess your reason is probably "It's the browser that was already installed and since I'm happy with it I don't want to change".
/nitpicking.

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/26/13 at 15:31:19

I downgraded to IE6 (the default for WinXP), the glitch still happened, then I upgraded back to IE8.

Just as when I kept deleting my account, I apologize if I wasted any admin time with trying to fix a bug that's specific to Internet Explorer, or even my PC.  [smiley=beer.gif]

Title: Re: When you log in for "1 hour"...
Post by Mario86 on 08/27/13 at 02:59:13


7571737D616F706D6C180 wrote:
[quote author=7E5953585F5C51436F785142465549300 link=1377230499/0#14 date=1377545591][quote author=765A495254030D3B0 link=1377230499/0#12 date=1377530793]
2/ Why IE8?

2. I have always used IE8 since I've had this computer.[/quote]
This isn't an answer to his question.[/quote]
Well it looks like "I'm Christian because I've been taught to be", no offence...

Title: Re: When you log in for "1 hour"...
Post by Mr.Nosey on 08/27/13 at 10:50:43


416D7E6563343A0C0 wrote:
[quote author=7571737D616F706D6C180 link=1377230499/0#15 date=1377556985][quote author=7E5953585F5C51436F785142465549300 link=1377230499/0#14 date=1377545591][quote author=765A495254030D3B0 link=1377230499/0#12 date=1377530793]
2/ Why IE8?

2. I have always used IE8 since I've had this computer.[/quote]
This isn't an answer to his question.[/quote]
Well it looks like "I'm Christian because I've been taught to be", no offence...[/quote]
Eh? Can you please explain what you mean?

Title: Re: When you log in for "1 hour"...
Post by Mario86 on 08/27/13 at 12:01:08

Looks like what happens when you've been taught to use something by default and never consider other opportunities exist.

The religious comparison was kinda akward though, sorry for that.

Title: Re: When you log in for "1 hour"...
Post by Mr.Nosey on 08/27/13 at 14:02:02

Ah, I get it now, and now it seems so obvious! :D
I enjoy the comparison now, teeheehee...

Title: Re: When you log in for "1 hour"...
Post by Saint Nicholas de la Harvey on 08/27/13 at 23:34:23

If you go to this forum through Google Translate, you can read all of the posts translated into the language you've selected but you will not be able to log in (since you're visiting from an "outside domain"). You can still be logged in in another browser window though, in case you want to post a reply. I wonder if anyone here who isn't a native English speaker actually does this. (You can even have GT open in a third window if you want to type up your reply in your native language and then translate it to English before you post.)

Title: Re: When you log in for "1 hour"...
Post by Yoshistar™ on 09/06/13 at 11:58:34

Everything's fucked up when translated to Dutch ;D

Title: Re: When you log in for "1 hour"...
Post by Fant0m on 09/09/13 at 04:42:00


42656F6463606D7F53446D7E7A69750C0 wrote:
If you go to this forum through Google Translate, you can read all of the posts translated into the language you've selected but you will not be able to log in (since you're visiting from an "outside domain"). You can still be logged in in another browser window though, in case you want to post a reply. I wonder if anyone here who isn't a native English speaker actually does this. (You can even have GT open in a third window if you want to type up your reply in your native language and then translate it to English before you post.)

Roronoa does this... ::)

Mario Kart MB » Powered by YaBB 2.2!
YaBB © 2000-2007. All Rights Reserved.