11-05-2001 17:21									#1
	Cookies don't remember I logged in for Private Messages Help yourself to an AD-FREE life

When I haven't posted during the current session, the private messages inbox displays "log in to check your private messages". If I post on a thread, the private messages inbox displays "DaveV - you have xxx private messages". So far, so good.

If I don't have anything to post, I click on the inbox link, enter my username and password, and am taken to my inbox. All is still well. But when I click the "Apolyton Forums" link, the private messages inbox is back to saying "log in to check your private messages". Apparently, logging in on the private messages page does not set the cookie? Or do I need to change some settings somewhere? I'm running IE 5.

	11-05-2001 18:03									#2
	Support Apolyton buy from Amazon

And if you in your Inbox press "Receive" to see if new messages would have just arrvied you get an ugly supprice.

Namely your login and password are visible in the header-row: http://apolyton.net/cgi-bin/ubb/privateview.cgi?user=Jeje2&pass=XXXXXXXXX
This isn't good.

Oh. btw. Using Win2000 Professional and Netscape 4.71

<font size=1 face=Arial color=444444>[This message has been edited by Jeje2 (edited May 13, 2001).]</font>

	11-05-2001 20:21									#3
	Support Apolyton

<center><table width=80%><tr><td><font color=000080 face="Verdana" size=2><font size="1">quote:
<img src=/forums/"/images/blue1.gif" width=100% height=1>
</font><font size=1>Originally posted by DaveV on 05-11-2001 08:21 AM</font>
Apparently, logging in on the private messages page does not set the cookie?
<img src=/forums/"/images/blue1.gif" width=100% height=1></font></td></tr></table></center>correct

as we have said in the past, private messages is not a built-in feature and isnt 100% integrated with the scripts...

	12-05-2001 02:02									#4
	Inflate your Upload Space

How many people will now try that link to attempt to get into JeJe2's login?

	13-05-2001 16:27									#5
	Support Apolyton, buy Alpha Centauri

<center><table width=80%><tr><td><font color=000080 face="Verdana" size=2><font size="1">quote:
<img src=/forums/"/images/blue1.gif" width=100% height=1>
</font><font size=1>Originally posted by Immortal Wombat on 05-11-2001 05:02 PM</font>
How many people will now try that link to attempt to get into JeJe2's login?
<img src=/forums/"/images/blue1.gif" width=100% height=1></font></td></tr></table></center>



Thx, for the confidence in my skills about publically telling my password.

That said, the truth is I'd forgotten that the script can make a link automatically. I copy-phasted the link to have an ex. - I didn't think the link would be made (If I want to use a link inmy writing I use a href....)
So, blame on me


But returning to the actual fact. I think this is a serious thing and it should be removed asap IMHO.