Last modified: 2014-09-23 19:32:14 UTC
Created attachment 11091 [details] Special:NewMessages has me logged in, as who/what exactly? This might've been filed before, though I couldn't find it. For several months now there's on Special page I often visit from url completion history, and that's Special:NewMessages on mediawiki.org. And if I'm not logged-in, I'll simply login and return to that page. Now the thing is however that sometimes I'm logged out (I know I am from logging at the header and the absence of certain scripts) yet Special:NewMessages appears to show something it shouldn't. Not sure what this is or where it came from. Could be an API request cached by my browsers, could be some state being kept somewhere else I don't know, could be someone elses messages, no idea. See screenshot for details, as well as tracking POST requests to api.php and a cookie dump.
Krinkle -- are you able to reproduce this still, on mediawiki.org?
It is hard to reproduce a server-side session loss. However I believe this is a bug in the way Special:NewMessages determines user session. Considering that LQT is mostly unmaintained, I suspect this bug is still very much alive when this server issue would happen again.
