~~~~~~~~~~~~ IMPORTANT INFORMATION -- Please read! ~~~~~~~~~~~~

1. The "search..." box above searches the Docs & Forum Posts. The "Search" tab above just searches the Forum Posts. :side:
Please use these to search for your issue *before* creating a new message topic, as your issue may have been previously solved.
2. Please put your Club # and Club Web Address in your Forum Signature (best) OR in each post to get faster support from us.
Click here to edit your signature at the bottom of the Profile Information tab.
3. Our user and admin docs are available at: support.toastmastersclubs.org/doc "There's a doc for that!" ;)
4. There is an "Opt In" Feature for newly added members. The Opt In document explains the [strike]strikethrough[/strike] member information. Click Here to View the Post
5. When posting a New Topic , please include all relevant details and be specific. When did your issue 1st occur? What operating system, browser, & browser version are you using? Did you refresh your browser cache? Are your cookies enabled? Lastly, a screen shot is often helpful.
6. Please abide by the Terms of Use . We are volunteers contributing our spare time. We are happy to assist you, so long as you are respectful and courteous.
7. We are always looking for new FreeToastHost Ambassadors to join our team and support fellow Toastmasters in their use of the FreeToastHost website system. If you are familiar with the system and have some interest, send a Send Us a Private Message.

Cannot make changes to website.

More
8 years 6 months ago - 8 years 6 months ago #60424 by SteveTheTechie
Ok, I have spent over 3 hours on this issue. (You will get my bill in the mail... just kidding. :lol: ) You even had me thinking maybe it was a bug I had overlooked, even though the problem only happened on your website. :pinch:

I thought maybe you had put a script in your content (nope), or some of the other usual suspects.

However, I finally did prevail... I must say this one was something I had not seen before. :blink: one for the "history books".

Here is the offending content I finally found in your home page after much searching:
Code:
<img alt="" src="http://valleyshore.toastmastersclubs.org/index.cgi?adminauth+3940+jX5hnrSw6S8RHHRd1TgXxCj5z" />

This was located right before the code for your gif images, so I looked right past it several times. The problem with this is that somebody put this page address that causes logouts on the server in for the image address. So every time you would load the home page it would always log you out. Unfortunately, since logouts are not always immediately shown unless you trigger them, you never knew you were already logged out on the server when you loaded the admin console. The admin console only looks for the tracking cookie on your computer for logouts... it does not contact the server until you do a save.

I have to say this is insidious as far as user oops go... no script was involved, just an ordinary image img tag that everyone uses. :lol: I had to wipe your home page content then restore it later w/o the offending code just to do the fix.

BTW, your website is working again. ;)
Last edit: 8 years 6 months ago by SteveTheTechie.
The topic has been locked.
More
8 years 6 months ago #60442 by Debs
Thank you for sorting this all out Steve. Just so I understand, the code logging admin access our was pasted before the photo? Normally when I upload a photo I have to copy and paste our url on the image properties page when in admin to the site. Do you know the code logging the admin out could have gotten in, and how it happened? Deb

3940
The topic has been locked.
More
8 years 6 months ago - 8 years 6 months ago #60443 by SteveTheTechie

Thank you for sorting this all out Steve. Just so I understand, the code logging admin access our was pasted before the photo?

Yes.

It was not anything I or the system did. Apparently someone got confused and just copy/pasted the url from the address bar in for an image address.

I think it was just coincidence that it happened to be the url that logs you out. It is curious though that a person would have to copy that url after logging out, then log back in and paste it into an image. :?

I would just chalk it up to a lesson learned and move on. ;)
Last edit: 8 years 6 months ago by SteveTheTechie.
The topic has been locked.
More
8 years 6 months ago #60454 by SteveTheTechie
I am presuming this is a closed issue... locking the thread.
The topic has been locked.
Time to create page: 0.101 seconds