In C# for instance. If you mark a field static it is the same for all instances of a class (if you don't mark the code as thread static). So if you have static User field that changes on logon it will change for everyone. I have seen this but typically more complicated versions of it.
Store user in static variable during processing data, then forget to clear the variable when you are done, so for the next request it still has access to the old data?
AtNightWeCode|4 years ago
adflux|4 years ago
chopin|4 years ago