collinrestores
Junior Member
Here's what I just tried to do:
1. Visited site
2. Observed that I was not logged in
3. Tried to log in, typed incorrect password
4. Accidentally clicked "here" for the forgot password page
5. Forgot password page loads
6. Notice that I am somehow now logged in despite never having entered my correct password
7. Navigate to the questions section of the forum and make this post - again still without having ever entered my password correctly
How did this happen? Feels like a security problem somehow. I guess there are cookies or local storage entries in my browser, but once it invalidates my session, it certainly ought not to behave this way.
1. Visited site
2. Observed that I was not logged in
3. Tried to log in, typed incorrect password
4. Accidentally clicked "here" for the forgot password page
5. Forgot password page loads
6. Notice that I am somehow now logged in despite never having entered my correct password
7. Navigate to the questions section of the forum and make this post - again still without having ever entered my password correctly
How did this happen? Feels like a security problem somehow. I guess there are cookies or local storage entries in my browser, but once it invalidates my session, it certainly ought not to behave this way.