Board Game Arena

I tried to post this on bugs but that section only allows for game related bugs.
I play on and off on this website every few weeks/months and have some friends who do that on longer periods of time. One friend forwarded me a mail he received recently which was how its been a while since he last logged in and it suggested a game to try. He forwarded it to me cause its a gmae we both enjoy irl. The problem is that when I clicked on try the game instead of logging into my account it logged into my friends account. Mind you he has never had any access to my pc.
I think this is something that needs a major change and fast cause it seems to me that user credentials are getting accessed by people that shouldn't.

I can confirm. I've just tried to look at one of my emails, and clicked on the link and it connected me to my account without even asking me my password.

You can submit general bugs under "main website, not related to a game". No similar report seems to exist yet: https://boardgamearena.com/bugs?game=0

Can you post a redacted version of the link? There must be a parameter in there that causes this.

Thanks for this message.

The intention was to make it easy for you to get back on BGA after a while, but as you stated it should not be done this way.

We will immediately fix this and find another way to achieve this goal.

sourisdudesert wrote: ↑13 July 2021, 13:00 Thanks for this message.

The intention was to make it easy for you to get back on BGA after a while, but as you stated it should not be done this way.

We will immediately fix this and find another way to achieve this goal.

Never enable a system to add auto login.. still ask user / password. Or it must be with a token to use once… then maybe but still dangerous