XF 2.0 Users are logged into each others accounts

[Recep Baltaş]

We had this weird problem only when we were using Sucuri and our hosting enabled Full Cache...

We are now on CLoudFlare and never had this problem. But after upgrading to XF2, some users are reporting login problems, some are logged into other peoples accounts. I had LiteSpeed cache installed. I've now removed it entirely.

The question is, should I truncate session table and change session prefix?

And where is the session prefix setting in XF2?

 

[Ozzy47]

Whenever this has bern seen before it has been due to server level caching.

https://xenforo.com/community/threads/possible-security-issue.112813/
https://xenforo.com/community/threads/major-users-logging-in-as-other-users.108043/
https://xenforo.com/community/threads/members-being-logged-in-as-different-members-on-1-4-4.113491/

 

[Nirjonadda]

This issue happen from Nginx caching. Do you using Engintron for integrate Nginx?

 

[Recep Baltaş]

We are using Litespeed but LSWS Cache is only enabled on Wordpress.

 

[Freak]

Whenever this has bern seen before it has been due to server level caching.

https://xenforo.com/community/threads/possible-security-issue.112813/
https://xenforo.com/community/threads/major-users-logging-in-as-other-users.108043/
https://xenforo.com/community/threads/members-being-logged-in-as-different-members-on-1-4-4.113491/

This issue happen from Nginx caching. Do you using Engintron for integrate Nginx?

I’m using Engintrom Nginx and just ran into the same issue after implementing ssl and updating Engintron to the latest version. Anyone find a fix?

@Recep Baltaş

 

[Nirjonadda]

I’m using Engintrom Nginx and just ran into the same issue after implementing ssl and updating Engintron to the latest version. Anyone find a fix?

@Recep Baltaş

Read the Engintron wiki page for disabling micro Cache.

 

[Freak]

Thanks.