Download private messages - get another member's PM's

Amalgam

Just to put things in perspective. Not on a network, no other user of the PC, no alter-ego's. 3 Network. USB 'Midband' dongle.

I selected several PM's to download as a text file. I then deleted my PM's.

Just clicked the text file before filing it offline and they are the PM's of another member.

Is this common?

Known bug?

Dav

We're looking into it here in the office, but it doesn't strike me as a boards problem rather a 3 one. When you were browsing the site, was it definitely under your own account?

Ross

Can you PM me the userid/name of the person whose PMs you received?

Hasn't cropped up before to the best of my knowledge, but it may be something to do with how Three manages it's users connections (ie, caching).

Amalgam

Dav: Yes, my own account. I have no others. Non network environment, basically an Asus Eee accessing the internet through a 'Midband' dongle.

Ross: PM on the way.

Ross

This certainly looks like a Three problem, probably a rare enough situation to do with the plaintext format and generic URL used to retrieve the data.

Will probably need to stick in some extra secure identifier to the PM download URL.

Thanks for bringing this to our attention, most appreciated

Ross

I have put in a patch for this problem that should prevent it from occurring again, and I've submitted the patch to vBulletin, so if any other vBulletin forum owners are concerned about the same thing happening they can apply it themselves.

If this problem occurs again, please drop me a PM. Cheers!

Beruthiel

Ross wrote: »

I've submitted the patch to vBulletin, so if any other vBulletin forum owners are concerned about the same thing happening they can apply it themselves.

Nice one Ross.