Page 1 of 1

Logged in as moderator on website?

Posted: Wed Jul 17, 2019 9:02 pm
by MSOSDev
Hi,

I opened reactos.org and found I was logged in under an account called Jedi-to-be. Seemed like it was a moderator account.
I clicked logout but got access denied. Same message came up when I clicked add content, view published, new draft, and moderate.
It doesn't seem to be a security issue because of that. Just thought I'd give a heads up.


Don't know how to include image in post, clicked insert image but it didn't work so here is a screenshot link

https://ibb.co/XY2hR9Q

Thanks

Re: Logged in as moderator on website?

Posted: Wed Jul 17, 2019 9:37 pm
by justincase
There is a known issue where on rare occasion the server caches web pages as a logged in user and serves them publicly, this is most likely what happened here. It won't let you see any pages you wouldn't normally be able to see, it's just sending you the html for your current page as it would have been if that user was logged in, when you try to actually do anything as that user it won't work because you're not really logged in as that user, and trying to log out will fail because ... you're not really logged in. Make sense?