[imp] User accessing other's session without login

[Brent J. Nordquist]

On Mon, 12 Feb 2001, Steven Patterson <S.R.Patterson@soton.ac.uk> wrote:

> We have had some reports of a user connecting to our IMP url only to find
> they are at the folder list of another user without any need to login.
> [...]
> imp 2.2.0-pre12 on horde 1.2.9-pre12

Thanks for providing all your system details.  You definitely need to
upgrade; IMP 2.2.x has been final for quite some time now, and there were
fixes during the prerelease series that dealt specifically with caching
(this issue).

Nobody should be running -pre versions at this point.

-- 
Brent J. Nordquist <bjn@horde.org>
Yahoo!: Brent_Nordquist / AIM: BrentJNordquist / ICQ: 76158942