× Joomla Facebook Connect support forum

Topic-icon Posible Big Bug

Active Subscriptions:

None
14 years 2 weeks ago #3581 by Korpio
Posible Big Bug was created by Korpio
Hi, I just found a posible Big Bug with the JFBConnect....

I was on my laptop in my Joomla site using my account, and a friend grab my laptop and logged in to his facebook account... so when he visited my site, my account was already conected du to cokies, but he press on the JFBLogin button and it conected his facebook account with my account in my site...

So the question would be:
Isnt a way to prevent this? asking the users: "This account is already connected to another Facebook account, if you wish to create, connect or login with another account, please logout first"
The topic has been locked.
Support Specialist
14 years 2 weeks ago #3613 by alzander
Replied by alzander on topic Posible Big Bug
That does sound like something we need to investigate. I will put it on the list. If we find something that you can change before the next release to fix it, we will let you know.

Thanks for reporting it!
The topic has been locked.
Active Subscriptions:

None
14 years 2 weeks ago #3619 by Ivan
Replied by Ivan on topic Posible Big Bug
I noticed this happening for some time also. Is there a possible quick fix?
The topic has been locked.
Support Specialist
14 years 1 week ago #3640 by alzander
Replied by alzander on topic Posible Big Bug
If I find one, I will definitely post back here and let you know.
The topic has been locked.
Active Subscriptions:

None
13 years 11 months ago #3818 by Ivan
Replied by Ivan on topic Posible Big Bug
While this might sounds like a bug it really is just a feature that can be harmful if you are logged in and someone else gets on your computer.

Initially with jfbconnect 2.5 I notice that when I was logged into joomla as a joomla user and I navigated to facebook.com and I logged in there it seemed to initialize the api when I came back to the joomla site and caused it to show my facebook profile image while being logged in as a joomla user. I resolved this issue by commenting out the code that checks if you are a ($fbClient->user) and replaced it with the code below which was suggested by alex from sourcecoast:

if (($userMapModel->getJoomlaUserId($fbClient->user) != $jUser->get('id')) || $jUser->guest)
{

}

However if you are in facebook.com and logged into remembered.com simultaneously and you log off facebook.com it wil remain signed in as a joomla user without having actually registered as a joomla user. Which is okay for my since I create a pseudo user with facebook user name and request for email permission on facebook login and store that email in our database.

However this raises an issue since we rather have users provide us with their real email instead of their proxy emails.

My question is..I there a method to prompt a dialog box rather than the facebook dialog prompt to request for an email this way? Would this be against their terms of serivce? I notice whrrl.com uses this methos which seems to bypass facebooks.

In facebookhelper.php there is code that seems to execute the javascript to prompt the facebook dialog box. Can we place code there to pop up another dialog box and prompt for an email there?
The topic has been locked.
Support Specialist
13 years 11 months ago #3835 by alzander
Replied by alzander on topic Posible Big Bug
The 2.6 version does prompt user's for their email address. This is the recommended method from Facebook for asking for user's emails. There were other ways to do it in the past, but FB has constantly changed their attitude toward these alternative methods, so we're not planning on implementing them.

As for the logging in and swapping users, currently, we don't have a way to prevent this as we auto map the account to the Joomla user that is logged in. We recommend always logging out when you are done with your session, and making sure the session timeout is not overly long. The default for Joomla is 15 minutes.

For version 3.0 which will use the Facebook Graph API, which is being worked on now, we plan to overhaul and re-evaluate all possible issues like the ones mentioned here and provide either more options for configuring functionality, or making changes to default behavior as necessary.
The topic has been locked.
Active Subscriptions:

None
13 years 10 months ago #3983 by Ivan
Replied by Ivan on topic Posible Big Bug
Hi,

"As for the logging in and swapping users, currently, we don't have a way to prevent this as we auto map the account to the Joomla user that is logged in."

Has this issue been resolved in the latest module/component released?

I still have the issue for 2.5 if i am connected via facebook on my connet site then go to the facebook.com site and log off and connect with another account. When i come back it tells me i am signed in as joomla user and shows the connect button, when i click the connect button the avatar for that other account shows it still is the same user and it says facebook profile connected successfully.
The topic has been locked.
Support Specialist
13 years 10 months ago #3989 by alzander
Replied by alzander on topic Posible Big Bug
What's described above is still the behavior in the 2.6.x series. In 3.0, we plan to have an option to disable mapping accounts, but are also investigating a 'lock' on the usermap table so once a FB ID is in there, it can't be re-associated.
The topic has been locked.