a big bug

[had]

on my blog i have statcounter code.. and a few minutes ago i noticed that someone came from statcounter on my blog.. i click on the link, and i got into his account.. so i can see his traffic and everything..

is this bug or feature

thanks..

[StatCounterJen]

Hi Had,

Thanks for reporting this, but it's actually not a bug.

If you have cookies enabled in your browser this linking into another account can't happen.

By not allowing cookies you are forced to use a php session ID - this is simply not as secure a method as using cookies.

See this thread for a full explanation.

Thanks!

[webado]

That was explained before by the fact the other user is not accepting cookies, so he's got session id's on his Sattcounter admin url's.

Somebody visiting your site followed a link to this other user's site. This other user then checked his stats and went to the referrer (your site), thus left as referrer his Statcounter admin page url (with session id), then you right away followed that referrer back to his admin page riding on his session id.