Serious issue: appears to log you in as a different user?

Obviously, that's not the right behavior. Fortunately, that's not something we've heard reported before and not something I think is a true security problem.. though we'll gladly help investigate however we can.

My initial thoughts on that are that you're using the System - Page Cache plugin, which comes with Joomla. If so, it could explain the behavior your seeing. That plugin will store a copy of a page when it's loaded on the site to your filesystem and then just send that saved copy to any user that requests it. That plugin is *only* for brochure-ware type sites and should not be used on any sites with authentication for the reasons you mention above. It's also disabled by default with any Joomla installation.

Gzip compression wouldn't have any effect on this problem and you can safely leave that enabled.

If you have other caching extension or options enabled, I'd recommend turning them off, briefly, just to see if the problem goes away. When you turn them off, make sure to clear your browser cache before you try again. Some plugins will instruct your browser to cache some stuff and, even when they are disabled, the browser still keeps those instructions.. which can be extremely frustrating since it will seem like the plugin is still enabled when it isn't.

Try testing without caching and I'm assuming things will work. Then, slowly enable caching settings one at a time and see if there's one magic setting that loads the wrong info for you.

Ultimately though, since Joomla is rejecting requests to edit the 'wrong' profile, it means that Joomla knows the correct user that's logged in.. which again points to caching just flubbing things up.

I hope that helps explain, but if you need anything else, just let us know.

Thanks,
Alex

No problem and glad to help. That plugin used to just be called "System - Cache", which was a disaster cause everyone enabled it expecting amazing things.. it always just ends in tears "Page Cache" isn't much better, but it's easier to call out that it's a specific type of caching feature and to take caution with it.

Either way, all other forms of caching in Joomla generally shouldn't have any trouble with JFBConnect. Of course, if you do run into something, just let us know and we'll gladly help investigate.

Thanks,
Alex