TOPIC:

I am the web admin to our website. I tried to change the information in our floater message, and was not able to make the change. I tried several times and think somehow was inadvertently banned from making changes. Our club president tried to go in as well, and could not make any changes. Any ideas?

Can you give some specifics about what you expected to see happen vs what actually happened? A screen shot may also be helpful if it helps make your point.

Hi Steve,
I can get in as Admin and our President can get in, and we are able to type the changes in, but when I click on save, it knocks me out as admin. Thus, the changes typed in cannot be made. The same thing happens to our club president. A screen shot won't help, because it happens so quickly.
Thank you.
Deb

Ok, you are getting logged out for some reason... bizarre.

It does not matter what you update/save... you get logged out.

I will have to look into this a bit more. It has been a while since we have had any weird logout issues.

Steve,
If I try to change the floater and save it bumps me out, if I try to make changes to web page content it bumped me out. Before all this I was able to load a gif file to the site -- it let me do that but after I tried changing floater message it would not allow the typed changes to be saved, and bumped me out -- same thing with page content chants or additions to wording.
Thanks,
Deb

It does not have anything to do with editing content... If you log in then, just refresh the page, you will get logged out also.

Very weird... I am reviewing code I have not looked at in over a year to try to resolve... please be patient.

Ok, I have spent over 3 hours on this issue. (You will get my bill in the mail... just kidding. ) You even had me thinking maybe it was a bug I had overlooked, even though the problem only happened on your website.

I thought maybe you had put a script in your content (nope), or some of the other usual suspects.

However, I finally did prevail... I must say this one was something I had not seen before. one for the "history books".

Here is the offending content I finally found in your home page after much searching:
This was located right before the code for your gif images, so I looked right past it several times. The problem with this is that somebody put this page address that causes logouts on the server in for the image address. So every time you would load the home page it would always log you out. Unfortunately, since logouts are not always immediately shown unless you trigger them, you never knew you were already logged out on the server when you loaded the admin console. The admin console only looks for the tracking cookie on your computer for logouts... it does not contact the server until you do a save.

I have to say this is insidious as far as user oops go... no script was involved, just an ordinary image img tag that everyone uses. I had to wipe your home page content then restore it later w/o the offending code just to do the fix.

BTW, your website is working again.

Thank you for sorting this all out Steve. Just so I understand, the code logging admin access our was pasted before the photo? Normally when I upload a photo I have to copy and paste our url on the image properties page when in admin to the site. Do you know the code logging the admin out could have gotten in, and how it happened? Deb

Thank you for sorting this all out Steve. Just so I understand, the code logging admin access our was pasted before the photo?

Yes.

It was not anything I or the system did. Apparently someone got confused and just copy/pasted the url from the address bar in for an image address.

I think it was just coincidence that it happened to be the url that logs you out. It is curious though that a person would have to copy that url after logging out, then log back in and paste it into an image.

I would just chalk it up to a lesson learned and move on.

I am presuming this is a closed issue... locking the thread.