Another user's profile information showing

[fletj]

This is of great concern. I switched on Simple Membership just 5 days ago, and have had 1,412 people register in that time. I gave members the ability to see their Profile, and I also let them see their login status on a sidebar.

Today I have had two reports that a different member’s information is showing up, indicating that they are using another person’s account. And in Profile they could see the other person’s email address (and, no doubt, could have changed their password). I cannot find a pattern: I checked their entries in Members, but the “rogue” details are not coming from adjacent entries.

I know this is not TalkTalk standard, and that my site isn’t a bank, but this should not happen. I have now removed the Profile link, and the also the login details from the sidebar.

I would appreciate a speedy response to this, if at all possible.

JohnF

[fletj]

I forgot to add that the Debug Log is showing nothing but SUCCESS

JohnF

[admin]

That looks like a caching issue (you are likely using a caching plugin or your server is doing caching on their end). This plugin needs the page to be rendered dynamically. If you are showing a cached page to everything then it won’t work unfortunately.

[fletj]

Hi admin,

Just a heads-up for any others who may stumble upon this post.

I’m reporting back just to say: THANK YOU. It was a caching plug-in I had been advised to use by my webhost in order to speed up my site. I wasn’t aware that it had ramifications. Once switched off all this has now gone away.

JohnF

[Author]

Posts