Login And See Someone Else Profile

[freaksj]

hi everybody,

 

I'm developing a system using Code Ignitor framework.

When a user login to the system, it keeps user profile in session

 

as general way.

Sometimes users report me that, they can see "someone else

 

profile", and when change page, it becomes normal, and some times,

 

they can see someone else profile again.

 

This problem is found only some times, but it is really not good.

 

I cannot specify the cause, because session system in the

 

framework should be well-design. I also wonder that for systems

 

those require high-certainty such as online banking, how do they

 

manage this issue.

 

Please give me some idea about this problem.

Thanks a very lot,

[jcbones]

There are a number of reasons this could happen. You need the users that it is happening to, to give you the exact details (page, what they click, etc), to trouble shoot this problem. It could be anything from data collision (hashes), or a database query, or lack of database normalization. But, this will require extensive testing to find what causes it.