I was reviewing posts and noticed one that should be responded to by a specific individual (in this case a mod) so I just copied and pasted the link into an e-mail to that user.

They clicked the link, and replied to the post. However, the reply shows it is from me and not that user. They were never asked to log in, so it looks like the link I sent also had my security info embedded in it.

Can this be fixed.

Don't provide links that contain a "sid=" part. For more info, please read this topic:

https://help.forumotion.com/frequently-asked-questions-f5/internet-security-on-you-forum-habits-to-be-avoided-t51.htm

Thanks for the tip, but isn't this a severe security risk that should be fixed?
Please tell me this is being looked at.

Well, not sure if it's necessary. In my time being here, I've never noticed another case where someone was able to login into another account through a "sid"-link. So you can be sure this is happening very rarely and it's avoidable; do you share the same network or something with this user?

As this forum I created is strictly for use by our company's employees, the vast majority of the users are using the same LAN, hitting the board with the same ip address.

Am I the only one here concerned with this security hole?
How come this doesn't happen with standalone phpBB boards? Can't this be fixed?