MODs, immediate action needed
 

I think we have a security problem with the DDD link on the main page.

Which page is the link on, where's it located, and what's the problem with it?

this page: http://www.dvdtalk.com/ ?

I'll notify the admins, but I'm not sure what or where the problem is.

-stevevt

Maybe I'm missing something...I'm not well versed on how web sites/links work....

But I clicked on the Deep Discount DVD link on the main page (to buy the new Twin Peaks DVD), and I was taken to their main page already signed in as some guy named Charles in Brooklyn.

I am 100% positive that my computer was not previously signed in with this person's account (I had access to all his account info). I live in VA and was surprised that my cookies didn't work.

So maybe it was a DDD problem and not DVDTalk's link.....but it is a major security issue that somebody needs to know about.

By "the main page," are you talking about www.dvdtalk.com or some other page? Letting us know which page it was on, and where it was on the page (was it a banner ad at the top, or a "Sponsor Link" or elsewhere?), will help Geoff and DDD pinpoint the problem.


Agreed. I'll make sure that the owner of this site gets the info, once we hammer out these details.

Thanks.

-stevevt

Sorry for not being more specific....

It was the Deep Discount DVD thread in the very middle almost at the top of the main forum page. It's on this page too.

It's not doing it now of course....

But the Charles from Brooklyn settings that I got had to come from that link....since it was the only DDD link I've used lately and I am absolutely positive that no one has used my computer to sign in under that strangers account.