[Tralala]

Originally Posted by Psionic Vision

I just checked, it does logout you properly. Unfortunately, I am unable to recreate the problem on my computer...

Maybe I need to clarify; I'm not sure we're talking about the same thing. You might have written this mod for an admin who swaps back and forth between two accounts, and for that it works great. But in practice, I thought it might also help some members of my forum who share the same computer and often forget to log in and out to the proper account.

Here are the reproducible steps I am talking about:
User A (Alex) and User B (Brenda) have linked accounts, set up by a moderator.
Clear cache, clear all cookies, launch browser for first time.
Log into forum as Alex. (Without checking "Remember me.")
Alex is then able to easily "switch" to Brenda's account, despite Brenda never having logged in on this computer. Alex an switch back and forth between Alex and Brenda's account, even if Alex doesn't know Brenda's password. If, while logged in as Brenda, the user "logs out," the user can log right back in with Alex's account, and switch back over to Brenda's account. Essentially the accounts are linked intrinsically and if one is logged in, the other is logged in too. When either account "logs out," it logs both accounts out. I guess what I'm saying is, they share the same "logged in/out" state, and that could be an issue for linked accounts who aren't actually the same person. Like, say, a married couple who share the same computer. Each could just switch over to the other and read their PM's, post as them, whatever. I was hoping it would give each user separate and distinct cookies for their separate "logged in states."

I have tested this on 4 different browsers on 2 different machines. The results are always the same.

I guess my question is; is it supposed to be working differently?


Thanks for a great hack regardless.