| |
hzink
|
So, if this is True, does that mean they cache sessions based on Location/URL parameters?
Harry
|
Bangkok Girls : Meet Attractive Thai Girls
Posted on: 1:11 pm on Nov. 2, 2004
|
|
erikE
|
Well.
If you get logged on as another user it means you get onto another computer with "fresh" cookie on it. If you are sure you are the only person using this computer AND you get logged on to another account - this is a major BUG in Bkktonite.
There are 2 kinds of cookies (I will not explain cookies here, but they are, among other things, used to keep a user session alive (like login) ) :
1. Cookies stored on client's disc (the hard-drive on the PC you log on to). These have some date to be expired - could be 20 minutes, 2 years... I believe you can set the amount in the login screen on BkkTonite. My opinion is this options should be removed.
These cookies can also somethimes easilly be hacked to live forever... In WORST CASE these cookies store username/password in clear text....
2. Session cookies: Cookies stored in memory. Used to keep you logged on for the time you keep the browser window open (it also have some "date" to be expired - like 60 minutes after last activity). But in all cases - when all browser windows you opened for this session is closed, the session is closed - you are logged off.
|
Bangkok Women : Meet Sensual Bangkok Women
Posted on: 1:25 pm on Nov. 2, 2004
|
|
dotcom
|
erikE - you are right & you are wrong. BK reckons the problem lies with TRUE. I think he mentioned to me that TRUE use transparent caching which means your cookies get stored somewhere between your computer - TRUE modems & any web server. He mentioned that one fix was just to lock all of us TRUE users out.
I am at home - nobody else uses this computer. O yeah BK mentioned that TRUE were going to sort themselves out weeks ago.
However sometimes when I access the site - I won't use the term log in - because bkktonite recognises who I am. Sometimes it thinks I am some other member - umberto's clam house or something. I am sure lots of people can read my PM's - I don't give a rat's ass. But you are right that the site is not secure by any means.
I question the effectiveness of logging out but I will do it.
|
Thai Girls : Meet Sexy Thai Girls
Posted on: 2:52 pm on Nov. 2, 2004
|
|
dotcom
|
Ok Fellas - here is the work around. If you are using TRUE - you will need to do the following. In IE6 - open "Tools" >> "Internet Options" >> Look for the Tab Named "Connections" >>> click on "Settings" >>> place a tick into "Proxy Server" >> install this number 210.178.24.2 port 3128. ok & ok. Your cookies will now be recognised.
Be advised - this is going to slow down all the other web sites you want to visit. So turn it off after your session at BTF. After you use it once successfully those numbers will be stored & it is a simple a matter of ticking or unticking the box.
I can assure you this was the problem Basil Bush experienced here ---- http://bkkx.com/cgi-bin/forum/topic.cgi?forum=29&topic=185&start=0
The rules of the forum hadn't changed.
|
Bangkok Girls : Meet Sexy Bangkok Girls
Posted on: 3:05 pm on Nov. 2, 2004
|
|
|
|
dotcom
|
BK - not your fault that TA Orange True have their heads up their butts. I tried the suggested advice last night. I duly "logged out". This am ikonboard of course recognises me. I am still logged in. Best I can tell - FOR ME - logging OUT has no effect. When I switch on proxy server - I am logged in. Free access. PM is not secure.
http://bkkx.com/cgi-bin/forum/topic.cgiforum=24&topic=1895&start=40
TRUE Broadband & Asianet of course are one & the same.
|
Bangkok Women : Meet Beautiful Thai Girls
Posted on: 1:53 am on Nov. 3, 2004
|
|
hzink
|
Try one thing - try to go to the login screen (use a computer you never used to access BTF before, with), and set your time-out time to '0' (zero), and see what happens. Technically, it should just cycle you back to the login prompt (as your timeout is set to 'immediately'.) That way you can test expiration of your cookie.
Set it to 1 minute next, then wait a couple of minutes before reloading the screen, and see what happens.
Harry
|
Bangkok Girls : Meet Attractive Thai Girls
Posted on: 2:53 am on Nov. 3, 2004
|
|
|
|
dotcom
|
Ice cold Manuel. You edit my post. Bro you need to be asking BK how I managed to access your account & posted using your name. Any questions? Just ask.
If I were a prick I would have altered some of your settings. I merely wanted to expose the horrendous state of security.
P.S. I was in blade's account yesterday.
|
Thai Women : Meet Matured Thai Women
Posted on: 12:06 pm on Nov. 6, 2004
|
|
|
|
| |
me...