next »

[Simon]

I'm having problems with my new Wiki. Last night, I was editing a large number of pages, and I suddenly received this message:

Login error: There seems to be a problem with your login session; this action has been canceled as a precaution against session hijacking. Please hit "back" and reload the page you came from, then try again.

Later, I was able to log in again from the Main page. Although I can access most of the wiki, I cannot access image file pages. When I click on an image, I receive the login error message. Several of my administrators have reported the same problem when they try to log in.

Has anybody else experienced this difficulty? Any idea what causes it, and how to fix the problem? What does "session hijacking" mean?

My wiki is set on private mode, meaning that only registered users can view and edit pages. I've tried using both IE and Firefox, and I get the same error message on both browsers. The wiki's been online for about a week, the malfunction only occurred last night. Prior to that, it worked fine.

Any advice you can give on this matter would be greatly appreciated.

[Wikkii]

I am unable to reproduce this error on my end.

Could you PM me your wiki address and logins so I can try it on your wiki to see if I get the errors?

[Simon]

I am unable to reproduce this error on my end. Could you PM me your wiki address and logins so I can try it on your wiki to see if I get the errors?

It seems to be working OK now, I can access everything. However, I'd like to avoid this problem in future. Can you explain what "Session  Hijacking" means?

Thanks for your time. Cheers, Simon.

[Simon]

It's started happening again. The site was OK for a few days, but then we started getting the error messages again, usually when we try to access an image file.

This seems to have happened to a number of wikis. It's not an isolated incident, these users have had the same problem:

http://wikkii.com/forums/index.php?topic=467.0

http://wikkii.com/forums/index.php?topic=454.0

http://wikkii.com/forums/index.php?topic=538.0

Clearing the cache doesn't seem to work either. Does anyone here know what's causing this? What does "session hijacking" mean?

[Simon]

This user is having the same problem too:

http://wikkii.com/forums/index.php?topic=540.0

This could potentially become a serious problem for the entire community.

[Wikkii]

It's a caching issue. Session hijacking error is just to stop any unauthorised people from accessing pages that they should not have access to.

It is related to our new varnish cache and browser cookies. Please tell me if you still get the errors.

[Simon]

I'm still getting the error message.

[Wikkii]

I have disabled the new cache, looks like it's causing too many problems.

Should be good now.

[Simon]

Yes, it's working fine now. Thanks very much for your help with this.