Now I'm pretty sure it has to do with the proxy!
But it also seems like a "security" problem with/in PHP-fusion!
I did another test where I logged on at this forum (www.php-fusion.co.uk) with my user, then I logged out! After I logged out I borrowed a computer from a colleague that never have been on this site and on that computer I could still see my username in the "profile"-box...
Fortunately it didn't seem like I could do anything from his computer on my account! I was redirected to the page saying that "you have to be logged in..."!
But if there are several users with accounts behind the proxy it seems like they can see each others accounts! And I suppose that there could be users out there that work in the same organisation, with a proxy similar to ours, and maybe log on here and if they then can see each others accounts it seems like a security problem!
Best rgrds,
Leif
0 replies