This is how your site gets hacked....You will be surfing your page and reading the add requests. You may see a profile that you like. Then you may decide to add that person so you do. Very soon after you add this person you will probably go to post a comment. Then what happens is you will get a message that says
YOU MUST BE LOGGED ON TO PREFORM THIS ACTION ...... DON'T DO IT!
This is how they get your password...Trust me Immediately close your browser then Log back in. If you had paid attention as I do you will notice two things that are dead giveaways. The first one is how many times you have been viewed. I reset to Zero after every session so for me it was easy. Ninety Nine views in 30 seconds- NO way.Then the other thing is when the Fake Login page does come up. Look at the URL in the bar and you will see the word redirect in it. I hope you all post and repost this over and over.
NEVER RE-LOG ON During a session
Close Out and RE-Log on the proper way