[Tickets #7931] Re: Left Logout button throws "malicious request"

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/7931
------------------------------------------------------------------------------
  Ticket             | 7931
  Updated By         | perusse99 at hotmail.com
  Summary            | Left Logout button throws "malicious request"
  Queue              | Horde Base
  Version            | 3.3.3
  Type               | Bug
  State              | Feedback
  Priority           | 1. Low
  Milestone          |
  Patch              |
  Owners             | Horde Developers
------------------------------------------------------------------------------


perusse99 at hotmail.com (2009-05-25 12:56) wrote:

I have the same problem...

When I use the logout on head bar it only work if I'm in IMP if I'm in  
the main horde section I get the error message.

I can reproduce it anytime

> When I log in into our horde Webmail AND log out, immediately, i got the
>
> "We cannot verify that this request was really sent by you. It could
> be a malicious request. If you intended to perform this action, you
> can retry it now."
>
> message.
>
> This only happens with the "logout" button from the left frame menu.
> The "logout" button in the head bar always works.
>
> Probably there is something wrong with the "horde_logout_token",
> within registration.
>
> To watch the error, please follow these steps exactly:
> 1. ) Log in to your horde framework
> 2.) Push the "logout" Button in the left frame  (last one)
> 3. ) You get the message about "malicious request", mentioned above,
> AND you are not logged out correctly (session still alive)
>
> 1. ) Log in to your horde framework
> 2.) Push a button like Webmail/Inbox
> 3.) Push the "logout" Button in the left frame  (last one)
> 4. ) Your are logged out correctly
>