UKBouldering.com

the site => suggestions, requests, support => Topic started by: dave on January 05, 2011, 08:55:44 am

Title: login bug
Post by: dave on January 05, 2011, 08:55:44 am
Just noticed something a little queer.

if you view a thread whilst not logged in, then whilst on the thread login via the login fields at the top of the page then once its logged you in it returns you not to the thread you're currently viewing but to the previous one (assuming the thread you're on isn't the first one you read).
Title: Re: login bug
Post by: Plattsy on January 05, 2011, 09:15:12 am
Just tried it and got the same thread I was viewing and not the previous one.  :shrug:
Title: Re: login bug
Post by: Paul B on January 05, 2011, 02:13:49 pm
My login has been doing strange things, i.e. the stay permanently logged in feature doesn't seem to work.
Title: Re: login bug
Post by: Obi-Wan is lost... on January 09, 2011, 11:55:21 am
I'm getting this and its pretty annoying, being chucked out all the time and going to the wrong page when I log in again, grrrr
Title: Re: login bug
Post by: SA Chris on January 09, 2011, 12:12:04 pm
My login has been doing strange things, i.e. the stay permanently logged in feature doesn't seem to work.

yeah, forever doesn't seem as long as it used to.
Title: Re: login bug
Post by: benpritch on January 09, 2011, 12:19:30 pm
can't stay logged in either. is a right bore having to write my username etc every time i look in.
Title: Re: login bug
Post by: Falling Down on January 09, 2011, 02:01:32 pm
Ditto. Especially on three different 'putas and a phone.
Title: Re: login bug
Post by: nik at work on January 09, 2011, 02:20:18 pm
Same here.
Title: Re: login bug
Post by: chris05 on January 09, 2011, 02:35:09 pm
Stays logged in for me on work and home computers
Title: Re: login bug
Post by: nai on January 09, 2011, 02:37:01 pm
happening for me on the laptop (firefox) but not on the.phone.  browser related maybe?
Title: Re: login bug
Post by: SA Chris on January 09, 2011, 04:43:18 pm
Happens to me both at work and at home, using different versions of IE on a laptop.
Title: Re: login bug
Post by: GCW on January 09, 2011, 04:55:41 pm
I use FireFox and I've had to log in a few times, which is certainly a new occurence.
Title: Re: login bug
Post by: slackline on January 09, 2011, 05:01:37 pm
Had this a few times using Firefox-3.6.13

You don't have to enter your username and password everytime if you get your browser to save these details (the boxes will be automagically filled).  Just seems the "Keep me logged in" tick-box isn't being respected.
Title: Re: login bug
Post by: nai on January 09, 2011, 05:09:54 pm
same thing for me.
Title: Re: login bug
Post by: andy_e on January 09, 2011, 05:11:54 pm
me three
Title: Re: login bug
Post by: Bubba on January 09, 2011, 06:16:19 pm

Nice one getting to the cause of the problem Toby.

Can everyone please make sure that they are using strong passwords in order to prevent a successful account hack occurring?
 
Title: Re: login bug
Post by: Falling Down on January 09, 2011, 06:31:51 pm
Bubba69'sBIGC0ckz ?? :)
Title: Re: login bug
Post by: SA Chris on January 09, 2011, 06:53:35 pm

Can everyone please make sure that they are using strong passwords in order to prevent a successful account hack occurring?

What like hercules or shwarzenegger?
Title: Re: login bug
Post by: Bubba on January 09, 2011, 06:59:56 pm
:google: 8)
I thought it was the goddam sessions table playing up, which has happened in the past.

Bubba69'sBIGC0ckz ?? :)
Excellent password :)

What like hercules or shwarzenegger?
Sorry, no good; you want a mixture of letters and numbers, upper and lower case ;)

I would just like to recommend the extremely good Lastpass password manager (http://lastpass.com/) once again. Integrates very well with FF and I presume IE too. 
Title: Re: login bug
Post by: dave on January 09, 2011, 07:56:42 pm
just changed mine to "m1ĒkRv@^15@(u^T"
Title: Re: login bug
Post by: Bubba on January 09, 2011, 08:00:33 pm
Now you're talking  ;D
Title: Re: login bug
Post by: andy_e on January 11, 2011, 10:17:03 pm
My password is stronger than Johnny G.
Title: Re: login bug
Post by: andy_e on January 11, 2011, 10:18:06 pm
p.s. my password is not actually "stronger than johnny g" for all of you trying that, just thought I'd save you the time.
Title: Re: login bug
Post by: hairich on January 11, 2011, 10:28:33 pm
can you tell me what a spambot is and i am still having to login all the time
Title: Re: login bug
Post by: GCW on January 11, 2011, 10:29:20 pm
My password is stronger than Johnny G.

Nothing is stronger than the Lord G, fool.
Title: Re: login bug
Post by: GCW on January 11, 2011, 10:30:02 pm
can you tell me what a spambot is

It's those people attending A&E having "slipped in the shower".
Title: Re: login bug
Post by: slackline on January 11, 2011, 11:47:54 pm
can you tell me what a spambot is and i am still having to login all the time

In this context it means this (http://en.wikipedia.org/wiki/Forum_spam) but there are other contexts (http://en.wikipedia.org/wiki/Spambot).
Title: Re: login bug
Post by: hairich on January 12, 2011, 08:15:57 pm
thanks slackers,wish i had never asked.are the forum administrators doing anything about this.i am getting very fed up with having to login every time i want to get on here
Title: Re: login bug
Post by: nai on January 12, 2011, 08:19:32 pm
It's getting to the stage for me that my session is expiring after 5 minutes.
Title: Re: login bug
Post by: nai on January 12, 2011, 08:21:06 pm
I had originally typed a longer reply but my session timed out again and when I pressed post I had to login again and then ended up in a Start-New-Thread session....
Title: Re: login bug
Post by: slackline on January 12, 2011, 09:31:34 pm
If you're regularly getting logged out when posting, my advice would be when you've finished typing....

Hit 'Ctrl + a' to select all text.

Hit 'Ctrl + c' to copy all selected text.

Click on post (or hit 'Tab' followed by space if you can't be arsed taking your fingers of the keyboard).

If you get logged out then log back in, go back to the thread, hit Reply and then when focus is on the box you type in hit 'Ctrl + v' to paste your text back in before posting again (hopefully you won't have been logged out).

Its a pain in the arse to have to do it, but this is a few key strokes at the end of typing. There's not a great deal that can be done if bots/people are trying to crack the software, its a "security" feature to stop spammers, remove it, the board will get spammed more as our passwords will get cracked.  :shrug:
Title: Re: login bug
Post by: Paul B on January 12, 2011, 11:21:20 pm
Much as I hate it, couldn't captcha or similar be used at login?
Title: Re: login bug
Post by: fatdoc on January 12, 2011, 11:24:52 pm
can you tell me what a spambot is

It's those people attending A&E having "slipped in the shower".

medical joke that =  up the arse shampoo bottles..

[ for clarity... sorry]

Title: Re: login bug
Post by: fatdoc on January 12, 2011, 11:28:40 pm
BTW, is this browser specific??

I'm using my original password on here .... from the first week the forum was made... it has a weak security profile & I'm logged in on my macbook, imac, iphone and the wife's macbook ( all apple browsers) and I'm fine... :shrug:
Title: Re: login bug
Post by: Bubba on January 13, 2011, 03:32:14 am
BTW, is this browser specific??
Nope, not browser or OS specific.
Title: Re: login bug
Post by: nai on January 13, 2011, 08:03:32 am
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.

Wow brilliant   :-*
Title: Re: login bug
Post by: slackline on January 13, 2011, 08:15:29 am
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.
Not to worry, I'm sure it'll stop soon enough, in the meantime I'll do this Ctrl key voodoo shit that Slackers talks of.

Wow brilliant   :-*

Thats some stutter you've got going on there nai.  :P
Title: Re: login bug
Post by: sidewinder on January 13, 2011, 08:25:49 am
Just for your information I think this has happened a few times to me since the new year.
Title: Re: login bug
Post by: GCW on February 01, 2011, 03:05:50 pm
UKB very slow today and I have to keep logging in every 5 minutes.  Password is pretty decent, but will change it again.  Is it just me?
Title: Re: login bug
Post by: Paul B on February 01, 2011, 03:15:26 pm
UKB very slow today and I have to keep logging in every 5 minutes.  Password is pretty decent, but will change it again.  Is it just me?

its certainly not slow for me and the login bug has left me alone for a few weeks now.
Title: Re: login bug
Post by: GCW on February 01, 2011, 03:19:30 pm
Still getting logged out after changing passwords  :furious:
Title: Re: login bug
Post by: nai on February 01, 2011, 03:28:08 pm
I think the problem is someone/thing trying to log in with your username and logging your sessionout, so changing pssword won't stop that but ensuring you have a.strong password will make it less likely your password is cracked.

It's very annoying, I was very glad when it stopped
Title: Re: login bug
Post by: SA Chris on February 02, 2011, 10:22:06 am
I posted a reply, read a bit more and tried to post another a minute later and had to log in.
Title: Re: login bug
Post by: Bubba on February 08, 2011, 06:03:48 pm
After getting logged out once every minute for the whole of yesterday, I've installed a whole shit-load of anti-spam/anti-bot measures which will hopefully reduce this problem to a minimum.

Anyone trying to login, register or even just view the forum is now checked for having "bot like" headers, and against the Project Honeypot and Stop Forum Spam databases.

This may cause you problems if you access the forum using a proxy server but the new facilities should allow you to prove yourself human. Sorry if this catches you but this problem and the signature spam profiles needed to be addressed. 

I've deleted nearly 3000 spam profiles across ukbouldering and ukcaving this week  :o
Title: Re: login bug
Post by: Bubba on February 09, 2011, 11:33:05 am
Overnight across the two sites, the new software has blocked 970 spam/login/registration attempts. Not bad at all :)

I notice that Jim amongst others has been targeted as suspicious by the software - sorry Jim, I think somebody has spammed from your IP in the past, or you had a virus or something.
Title: Re: login bug
Post by: SA Chris on February 09, 2011, 11:56:15 am
Or you donwloaded the contents of an entire website, thus incurring the wrath of the cybergods.
Title: Re: login bug
Post by: Obi-Wan is lost... on February 09, 2011, 12:11:27 pm
Site is regularly throwing me out today from my work machine (Shef CC Proxy), well annoying.
Title: Re: login bug
Post by: slackline on February 09, 2011, 01:15:42 pm
Or you donwloaded the contents of an entire website, thus incurring the wrath of the cybergods.

 :lol: Well remembered!
Title: Re: login bug
Post by: Bubba on February 09, 2011, 01:54:16 pm
Site is regularly throwing me out today from my work machine (Shef CC Proxy), well annoying.
Yep, sorry - this isn't as a result of the anti-spam measures, this is just one who's still slipping through the net.
Title: Re: login bug
Post by: Jim on February 09, 2011, 02:37:38 pm
Overnight across the two sites, the new software has blocked 970 spam/login/registration attempts. Not bad at all :)

I notice that Jim amongst others has been targeted as suspicious by the software - sorry Jim, I think somebody has spammed from your IP in the past, or you had a virus or something.
that was on my phone last night, kept saying I've got a virus on it or something. Will scan it.
No trouble on the desktop
Title: Re: login bug
Post by: Bubba on February 09, 2011, 03:05:07 pm
Jim, here's an example of the problem - one of the IPs that you were using last night was 82.132.211.164

When I look at that IP on Project Honeypot I get this:

Quote
Example Messages Sent From 82.132.211.164
From: uijyho6687@360-2e07bf1.idsbi.com
Subject: For clarita_wiatrek
From: "We sell USViagra" <panioho4973@1800gotjunk.com.au
Subject: Hi djfredricksen. Get here for 60% off. of Macoumb
From: "We sell USViagra" <odauvi2401@1stloveonline.com>
Subject: Hi marline_crysler. Get here for 60% off. likely
From: "We sell USViagra" <uvoko2136@2350.uni-beispielsta
Subject: Hi janean_w_chiverton. Get here for 60% off. Civil
From: "Best from Pfizer" <seyxo2947@4parkers.com>
Subject: Hi debbiesdandoy, Black Friday Sale. born the as
From: "Bluemeds from Pfizer" <lefikugiha8228@35d-10d9eff
Subject: Hi mtfuell2, SALE ends Monday. the monitored
From: "Sale Reminder" <dawigomure5828@4kids.ee>
Subject: Hi supranationaltrade. airport onto Sunday become
From: "Carolyn Moses" <0-2tin@renault.com>
Subject: candystripedbartow
From: На��гуль Эд��ардо��на
Subject: Платья от 1333р.! Скидка 40%
From: "Eloise Audrey" <eaudreyaz@jhbryant.com>
Subject: All the best herbal sex pills for hard erections

So what's probably happening is that somebody has spammed from that IP address in the past, but you've been allocated it automatically via your phone company.
Title: Re: login bug
Post by: slackline on February 09, 2011, 03:06:42 pm
Or perhaps there is some of that software from "the usual places" installed on your phone that is doing nefarious things.  :shrug:
Title: Re: login bug
Post by: GCW on February 09, 2011, 03:17:14 pm
You must get through a lot of sildenafil Jim.
Title: Re: login bug
Post by: wiain on February 10, 2011, 12:26:15 am
I've been completely unable to log in at work for a few days. No error message, it just stalls after several minutes of nothing doing. Seems fine at home. Is the same problem?
Title: Re: login bug
Post by: Bubba on February 10, 2011, 12:41:26 am

Do you know what your work IP address is?
Title: Re: login bug
Post by: tomtom on February 10, 2011, 07:14:02 am
Hi Bubba,
Its been occasionally throwing me off a few times yesterday and tomorrow - on both phone and computer.
(Karoo, Hull...)
T
Title: Re: login bug
Post by: Bubba on February 10, 2011, 08:18:15 am

Yeah, there was still >200 users logged out overnight. Don't all tell me when this happens please!

The problem I have is until the same spammer IP offends twice with different usernames I can't really ban them as it could just be somebody forgetting their password.

But, please do tell me if you can no longer get on at all where you would have done a few days ago as that means you may be incorrectly being identified as a spammer by the automatic system.
Title: Re: login bug
Post by: slackline on February 10, 2011, 09:02:02 am
People can see for themselves a indication of how much spam activity is occurring thanks to the new plugins which put at the bottom of all pages...

Quote
Bad Behavior has blocked 412 access attempts in the last 7 days.
Title: Re: login bug
Post by: Bubba on February 10, 2011, 09:58:56 am

That's only one of 4 angles of attack but yeah, it does give you some idea - you can add another 1000 to that figure (and that's not including IPs that are firewalled at the host level) if you include the other blocks but it gives an idea of how many bots/spammers/etc are constantly bombarding a medium sized forum such as this.

Title: Re: login bug
Post by: SA Chris on February 10, 2011, 10:07:55 am
I wish I knew what the fuck you guys were talking about. But thanks for fighting the good fight as always.
Title: Re: login bug
Post by: butters on February 10, 2011, 11:44:50 am
Slackers will be along in a while to explain Chris - you still won't understand it though.  ;)
Title: Re: login bug
Post by: andy_e on February 10, 2011, 05:31:52 pm
I think it's something along the lines of people trying to get in to your front door with the wrong keys and leaving the key in the door so that you can't get your key in. What Bubba is doing is essentially leaving guard dogs and bouncers around the front door that check the keys before you can try your key in the door.  :shrug:
Title: Re: login bug
Post by: Bubba on February 10, 2011, 05:34:22 pm
Good analogy Andi  :great:

I've also got a squadron of pitbulls stationed just inside the door so that whoever attempts to stuff junk-mail through the letterbox gets their hand gnawed off :)
Title: Re: login bug
Post by: andy_e on February 10, 2011, 05:41:50 pm
I might get one of those in real life, I'm sick of being reminded how many take-aways there are in the area.
Title: Re: login bug
Post by: wiain on February 10, 2011, 08:22:34 pm

Do you know what your work IP address is?

Not offhand. I'll try to remember to write it down when I'm at work. I still definately couldn't log on today and neither could colleagues that I asked to try.
Title: Re: login bug
Post by: Jim on February 10, 2011, 10:27:57 pm
any chance of an exception on my current phone ip address or a way to get a different one? ta
Title: Re: login bug
Post by: Bubba on February 10, 2011, 11:38:23 pm
Jim - since you're a trusted user, I've added you to a new usergroup of "Trusted Users" which should allow you to bypass being checked by the system that's causing you grief.

I have no way of testing this however so please let me know whether it works ok - i.e. you don't get the "are you human" checks but you can still do everything that you used to be able to do on the forums.
Title: Re: login bug
Post by: slackline on February 10, 2011, 11:40:52 pm

Do you know what your work IP address is?

Not offhand. I'll try to remember to write it down when I'm at work. I still definately couldn't log on today and neither could colleagues that I asked to try.

http://www.whatismyipaddress.com (http://www.whatismyipaddress.com) will sort that out (would you like an egg with a straw as a side-dish?)
Title: Re: login bug
Post by: wiain on February 11, 2011, 12:39:03 am
http://www.whatismyipaddress.com (http://www.whatismyipaddress.com) will sort that out (would you like an egg with a straw as a side-dish?)

Indeed, but presumably only if used at the place in question. Where I can't get to UKB to see this thread and be reminded that I need to find my IP address. Hence my need to remember to look it up when I'm there, not here.
Title: Re: login bug
Post by: Jim on February 11, 2011, 12:40:15 am
cheers Bubba.
actually i've fooled you, i am a robot
beeb beeb beeb......
01100100111010110100001
error
Title: Re: login bug
Post by: wiain on February 11, 2011, 08:43:58 pm
Bubba, my work IP is 81.153.135.125 any chance you can call off the pitbulls?
Title: Re: login bug
Post by: Bubba on February 11, 2011, 09:31:25 pm

That was one of the IPs that I requested our hosts to firewall which would explain the behaviour at your end. I would only have done this if there were failed login attempts for more than one userid coming from that IP. Do you have more than one ukb user at work?

Anyway, I've asked them to remove the entry so hopefully it'll be sorted by the time you're back in work.
Title: Re: login bug
Post by: wiain on February 11, 2011, 10:23:35 pm
Do you have more than one ukb user at work?

I reckon so. We provide free wireless for The Foundry  ;D
Title: Re: login bug
Post by: Bubba on February 11, 2011, 10:25:23 pm
Ah! That explains a lot :)

Apologies for firewalling the Foundry!
Title: Re: login bug
Post by: philo on March 03, 2011, 12:56:06 pm
I believe i was a victim of this.  Got an error each time I tried to log in until one day bubba banned me  :chair:    it seems to have sorted itself out now though. 
Title: Re: login bug
Post by: Bubba on March 03, 2011, 01:13:02 pm

Yep, for the time being it's been patched - apologies again Philo :)
SimplePortal 2.3.7 © 2008-2024, SimplePortal