MoonSinger
02-26-2012, 10:40 PM
<p>I ran into a problem when redeeming station cash card codes today. I had 3 cards, two to apply to my primary account and one that I wanted to apply to my secondary account. The first two cards were credited to my primary account with no trouble. I then logged out of that account and logged into my secondary account, making sure that the 'Welcome,<name>' message showed the correct account name. I scrolled to the bottom of the page and clicked on the 'Redeem A Code' link there, and then entered the code from the third sc card. This is where I noticed a problem. When I applied the card code, and it forwarded to the window to select whether to use the card for sc or game time, the amount of sc listed was that of my primary account, not the account I was currently logged into and applying the card to.</p><p>I immediately stopped the sc card code application, ensuring that I was logged out of my primary account, and re-logged into the secondary account again, going to the account information page first, and then selecting the manage station cash button instead of the redeem a code button. When I tried to re-enter the code for the proper account, it told me that this code had been used and to contact support for assistance if I believed this to be in error. In order to verify my suspicions, I logged out of the secondary account and back into the primary account. I went to the redeem a code page again and re-entered the third sc card code, and this time was directed again to the page to select whether to credit the amount as station cash or game time. Clearly, somehow, the website failed to cleanly log me out from my primary account the first time around.</p><p>Because it was the last day of a double-value weekend, I completed the transaction to apply the third sc card code to my primary account for the double value of station cash. If it is at all possible to remedy the matter so that last 3000 station cash can be credited to my secondary account, as was intended, it would be appreciated. I would also recommend double-checking the method in which your website is interacting with your authentication servers so that when people log out of an account, that account's information will not be accessible to another individual at the same machine without re-entering the login information for that account. I suspect the problem could be related to a failure to properly terminate the login session when the 'Sign Out' button is used.</p><p>Thank you for your time and attention regarding this matter.</p>