comments on profile page

For some time now I have been unable to view comments on my profile page without going through the "A to Z" list. When I see that I have a new message I have no way of even knowing who it is from so that list is not a practical tool for me right now. I am guessing that I hit a button in error and inadvertently changed a setting but I have been unable, even with help from L/T friends, to find the error. I was advised to go to my settings in my profile page to make sure that I am allowing comments and that is set correctly.
Please help if you can.
Thank you,
rainpebble

>1 rainpebble: I see that you have not received any replies here yet. I can't help you with your specific issue but I do have a question about your profile page connection.

If you use Firefox as your Browser, have you noticed that when you change from other tabs to the Profile tab that your connection becomes either "mixed" or "not secure"?

If you use Chrome as your Browser, have you noticed the same thing as described for Firefox, but in addition that even if your login page is "https" when you start, after you log in, the navigation/address bar turns back to unsecured AND the only way to correct this is to manually manipulate the URL to include "https://"

NOTE: I was primarily using Chrome until I got sick of having to manually manipulate the URL. I started to use Firefox (and yes, it is up-to-date) for that reason with no problems noticed until tonight.

HOWEVER, this evening I provided my email address to a fellow LT member in a private comment box and within a couple of hours, a reply from an unknown address was sent to my personal email account that only ??? (a hacker?) could have known.

I am going to also post this in a new Bug Collectors string so that (maybe) one of us will receive a reply. I'm wondering if LT is aware the Profile page appears to be unsecured?!

WOW! I am sure that they must not be aware or they surely would have remedied that. Security is a huge issue for all of us who use the web.

Thank you so much for your response & comments. I will be checking out my browsers looking for fixes. I am currently using Chrome but not long ago was using Firefox.

Again, thank you. Good luck to us.

Just editing to say that I adjusted the way I was using my browsers for L/T & it changed nothing.

>3 rainpebble: Looking at this issue, I see that you're using the old version of the LT site. I'm pretty sure that's why you're having this problem. I'm afraid we're not supporting the old version of the site anymore. It's still available, but bugs specific to it are very unlikely to be fixed.

You can test this out by switching to the "new" site design (it was released over four years ago now, so it's not exactly new anymore) by going to your profile, and looking on the right hand side of the page near the bottom, for a section labeled "Site design selection".

Choose "Use the new design" and refresh the page to see if that doesn't fix your comments issue. Don't worry—you'll still be able to change it back, using the same method, if you want to after testing.

I'm using the old design, and I am not having this problem.

>3 rainpebble: Sorry it has taken me awhile to get back to you. I have to admit to giving up, thinking that top brass would ignore mine/yours/our concerns. I had posted my reply to you at 12:08 am, then followed by posting a new thread here:
http://www.librarything.com/topic/266624#

There were no replies until almost 4 pm and that one was not encouraging. However, as you read the other thread, indeed we both have seen something that others are now also seeing.

Yay, for us!! Cheers!...
Well, not that there is a security issue, just that we found it.

>5 MarthaJeanne: Thanks, MarthaJeanne, for posting your initial finding! I think this is going to take a village to fully realize the issue!

If you haven't already, you might be interested in reading the thread I started here: http://www.librarything.com/topic/266624#

>6 Conkie: Same day response is pretty decent for LT. The staff is small. They do lots of things. Even same WEEK response is fairly spectacular considering staffing/workload.

>1 rainpebble: Do you see ANY comments on your profile page?

>6 Conkie:

You realize this is not a massive site with 24-hour staffing, right? Same-day response to a bug is really good.

>9 lorax:

Yes, but thanks for the reminder.

>11 Collectorator:

Who is this?

Tim, I think LT has been hacked!

Snort.

Closing. No more comments on profile pages.