Reply To: Account hacked

[davefl]

vzzbuckz wrote:

If I log out, close the browser and then then go back in as the second person, and change their email address, then log out and close the browser, if I try to log in as the first user, I get a message saying I haven’t validated the new email address of the second user.

Basically a security nightmare; seems their session cookie management is broken. Do others see this?

Yes I’ve commented on it before. It’s the same reason you often get told you have multiple tabs open. Very poor session cookie handling. Incompetent web design or poor load Balanacer configuration.