What is meta? ×
Meta Stack Exchange is where users like you discuss bugs, features, and support issues that affect the software powering all 150 Stack Exchange communities.

When I tried to log out by clicking the logout link at the top (first time for me because I don't really log out of S[OFU] unless I clear my browser's session data), I got the following message:

You're a registered user.

You can log in or out at any time using the OpenID you've already associated with your account.

And when I clicked on the parts of the site, it seems that I'm still logged in (see, i'm creating this question after I logged out and this question would probably appear in the list of the questions I asked) and my name is still appearing at the top of the page.

Is this by-design or is this a bug?

share|improve this question
By-design :) – Ladybug Killer Sep 14 '09 at 8:38
Of course if you do actually click that "Log Out" button you're probably still not done logging out... – romkyns Feb 1 '14 at 22:05

2 Answers 2

up vote 27 down vote accepted

Have you clicked the Logout button below the message?

run rabbit, run!

share|improve this answer
Oh, crap. – Randell Sep 14 '09 at 8:30
Hence, it's not intuitive enough. – Randell Sep 14 '09 at 8:31
Needs moar Paint. – random Sep 14 '09 at 8:32
This is the only site that requires me to click the logout link twice just to logout. – Randell Sep 14 '09 at 8:33
Yes, random, but I'm in a hurry. Could you add some monsters to it? – Ladybug Killer Sep 14 '09 at 8:37
Randell: Are you sure? ;) – Ladybug Killer Sep 14 '09 at 8:37
Yes. – Randell Sep 14 '09 at 8:44
Can you also add people that are pointing finger at it ? – Clement Herreman Sep 14 '09 at 8:48
@Clement H.: Hand of God ;) – Ladybug Killer Sep 14 '09 at 8:53
Exactly ! Fear the power of the hand ! – Clement Herreman Sep 14 '09 at 8:57
I love you, random :) – Ladybug Killer Sep 14 '09 at 9:06
Waffles! – Ladybug Killer Sep 14 '09 at 12:38
Cannot upvote any harder. – random Sep 14 '09 at 12:47
the "pew pew" makes this image – Jeff Atwood Sep 15 '09 at 3:26
My bank, and several other sites I use all do this confirm logout. My only comment is the message given here is a bit odd... I know I'm registered, or I wouldn't be logging out, I know I can log in and out, because I have done so at least once. – pipTheGeek Nov 1 '09 at 10:27

If you had a "no-touch", "no-confirm" logout, then you could be forcibly logged out at will by any user who can construct an <img> tag. How? I leave that as an exercise to the reader.

Hint: it's important! Almost web security 101!

share|improve this answer
No points for you unless you explain yourself. – beska Sep 14 '09 at 17:19
Golly, even my non-web-dev brain can see the logic in this! Something like <img src="http://stackoverflow.com/logout.htm"></img>? – mmyers Sep 14 '09 at 17:27
Does that work? Hmm. Odd. – beska Sep 14 '09 at 19:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .