Questor opened this issue on Jul 29, 2004 ยท 17 posts
Armorbeast posted Wed, 04 August 2004 at 2:22 PM
There are major issues that need addressing here on rositys part not only regarding the session id issue,but how problems are addressed in general when members bring them to your attention.
The issue with the session id can be resolved easily with redundent features.When I access rosity I should not be auto logged into my account unless I access via the front page itself.My uncle is a programmer and was just here,I asked him to look and he said a child could figure out that when a link is sent or an ebot answered that this should only give a member access to the page...they should then be required to enter their password to comment then would stay auto logged in until they accessed by clicking another link.He said a lot of sites have this feature built in to protect both themselves and their members.
He summed it up Lillian by saying that cookies are by design created to save information and to auto log you into a site like rosity...requiring that everyone use cookies in no way resolves the issue because its the cookie that auto logs you in and its the info sent by the cookie in a session id link that tells your server who is logging in~not the cookies stored on a members computer who clicks the link.He describes it best as a conflict...sometimes the cookie on your computer will override the info in the link,sometimes it won't.
He also went through the threads and noticed something about Clint...Clint keeps saying how he accesses members accounts and that there is no problem.Being a programmer my uncle knows that its not that simple,people access the net using different browsers and even the connections themselves can be affected by things such as the isp or even speed.If you on your end see the site is up and running,then you will see every page exactly the same because your settings are optimised for your site...he also noticed bonbonish's comment about the sql errors she's experiencing and said that being that rosity just experienced a crash,this should be a dead giveaway that you have not resolved all the issues in getting rosity back on its feet.He described Clints comment as a brushoff and as being irresponsible because it says to members that their concerns do not matter...and considering that virtually every remark originates from viewing the pages from within the site itself,I have to agree somewhat.
The reason I expressed concern Lillian is that rositys such a great site,sometimes you'll have issues where the member is at fault and sometimes its the people on the site itself...of all the people there I consider you my fave so I hope you do not feel that any of this is directed at you,you are simply addressing this based on the info you have on hand.But what I think is being said here by me and others is that the info you have is incorrect...the session id issue leaves every member vulnerable and may be causing your merchants to lose untold sales,I think its worthy of your time to investigate the matter from all pov's and find a good solution to resolve it that members can live with:)
If the end goal of learning is genius...why are most geniuses failures at learning?