☰
×
Login Register an account
Top Submissions Explore Upgoat Search Random Subverse Random Post Colorize! Site Rules Donate
4

[BUG] Wrong information can be triggered at login.

submitted by TheRealBuddha to TalkDev 2 yearsApr 12, 2023 17:42:14 ago (+4/-0)     (TalkDev)

This is a fun one.

When you log in just right, it shows you a messaging inbox that doesn't belong to you.

Steps to reproduce:

1. Open https://www.talk.lol/commentreplies
2. Wait. Wait long enough so that you're automatically logged out.
3. Refresh the https://www.talk.lol/commentreplies page (may not be necessary).
3a. It should show you nothing of value, just basically the top bar.
4. log in to your user account.

The following page is what is displayed:

https://i.imgur.com/aG42Lda.png

As you can see, those are all comments left for someone who isn't me - and were left quite some time ago.

There don't appear to be any security implications. It's just weird.

I dunno what other steps can be used to recreate the bug, as I've not thrown much time at it. I only really started paying attention to it a couple of days ago. I haven't tried manually logging out or anything.


5 comments block

sort by: hot new top old low

[ - ] MasterAce 1 point 2 yearsApr 12, 2023 18:00:01 ago (+1/-0)

Definitely throw more time at it bro

[ - ] TheRealBuddha [op] 0 points 2 yearsApr 12, 2023 18:25:29 ago (+0/-0)

That's above my pay grade!

[ - ] system 2 points 2 yearsApr 12, 2023 18:14:57 ago (+2/-0)

I cant reproduce it but I logged out instead of waiting for the session to expire. Looks like these are comment replies where the recipent is null, hasn't happen since 2021 so I am guessing it's from an old bug. I am just going to prevent anything from happening if you are logged in and your username is null for some reason. Thank you. You've earned bug finder badge when I implement them. Which reminds me...

[ - ] TheRealBuddha [op] 0 points 2 yearsApr 12, 2023 18:27:59 ago (+0/-0)

Yeah, it's a weird one - but it has happened the past few times that I've noticed. I assume it happened before, but I didn't notice.

And, yeah, none of the links to comments (from pressing the link button) lead to anything. I probably should have grabbed a screenshot of those.

Wait, I can pull a link from my browser's history. One of the links led to this:

https://www.talk.lol/viewpost?postid=#comment_6147391e707e2

They all led to something similar.