Profile Updates(Not About Picture URL's)

[Ben Horne]

Hi all,

No, this is not about setting a Picture URL in my profile. I do, however, have one question. Is there some reason that we have to key in our password in order to update our profiles even though we are already logged on? It doesn't really make any sense to me. I mean, look at it this way:

I don't think anyone who's not logged in can change somebody else's profile. I might be wrong on this, though. If I am, please explain this whole thing to me.

Ben Horne
Flash Junkie (Seriously, I am)
Madison Area Technical College student
-------------------------
http://community.webshots.com/user/valerian114

Go there. I have a lot of awesome photos that I rendered myself

[planoie]

I have "remember me" turned on so I can post on wrox without logging on. If someone sits down at my workstation, they could post as me, but they can't change my information without knowing my password.

Even though I am a moderator and already logged in, I can't make forum changes without entering my password for the same reason. It's a security measure.

If you shop on amazon you see the same procedure. It seems to work for them ok.

[Ben Horne]

Oh,

That explains everything. BTW Peter, I love the picture of your dog. Just looking at the cute face of that dog makes me want to adopt it(hehe:D)

quote:Originally posted by planoie
 I have "remember me" turned on so I can post on wrox without logging on. If someone sits down at my workstation, they could post as me, but they can't change my information without knowing my password.

Even though I am a moderator and already logged in, I can't make forum changes without entering my password for the same reason. It's a security measure.

If you shop on amazon you see the same procedure. It seems to work for them ok.

Ben Horne
Flash Junkie (Seriously, I am)
Madison Area Technical College student
-------------------------
http://community.webshots.com/user/valerian114

Go there. I have a lot of awesome photos that I rendered myself

[Imar]

Well, with the risk of not being part of those who know who they are, here's my idea.

How about this: I am logged. Since the cookie is set to not expire in a while, I'll stay logged in.
I walk away from my computer to get a fresh cup of tea. While I am away, my malicious cubicle neighbor walks by, sees I am still logged in at P2P, opens my profile and BANG, uploads that darn picture of me as my Profile picture. And while he is there, changes my e-mail address and password, and start posting these really weird posts under my name, flaming people, ranting about non issues and so on.

Doesn't that sound scary to you? It does sound scary to me (you don't know my cubicle neighbor). I am glad you have to log in to change your profile. In fact, it's common practice you have to do so. If I am not mistaken, Yahoo for example, works the same way.

Instead of spending your energy with the "how this forum works", why not spend some time with "why" it works: helping people with tricky programming problems?

Imar


---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

[Ben Horne]

Hi Dad,

I have to agree with you. I would not want someone to login as me and start changing my user name and password or crap like that. So, I guess I don't really have to rant anymore

BTW, I don't see any rant tags ([rant][/rant]) I think they should be added.

quote:Originally posted by Imar
 Well, with the risk of not being part of those who know who they are, here's my idea.

How about this: I am logged. Since the cookie is set to not expire in a while, I'll stay logged in.
I walk away from my computer to get a fresh cup of tea. While I am away, my malicious cubicle neighbor walks by, sees I am still logged in at P2P, opens my profile and BANG, uploads that darn picture of me as my Profile picture. And while he is there, changes my e-mail address and password, and start posting these really weird posts under my name, flaming people, ranting about non issues and so on.

Doesn't that sound scary to you? It does sound scary to me (you don't know my cubicle neighbor). I am glad you have to log in to change your profile. In fact, it's common practice you have to do so. If I am not mistaken, Yahoo for example, works the same way.

Instead of spending your energy with the "how this forum works", why not spend some time with "why" it works: helping people with tricky programming problems?

Imar


---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.

Ben Horne
Flash Junkie (Seriously, I am)
Madison Area Technical College student
-------------------------
http://community.webshots.com/user/valerian114

Go there. I have a lot of awesome photos that I rendered myself

[Imar]

Well, son, you can start a new topic and ask for [rant] tags.



---------------------------------------
Imar Spaanjaars
Everyone is unique, except for me.