FW: [imp] User accessing other's session without login

[Chuck Hagenbuch]

Quoting "Patterson, S R" <S.R.Patterson@soton.ac.uk>:

> The problem persists, over the past week I've had two reports of
> people going to the IMP URL and immediately being presented with the
> mailbox of another user with no login needed.  I'm going to do some
> digging and investigating today but I thought I'd flag this for your
> attention and see if anybody has an immediate answer.

First, are you absolutely sure these users are using distinct machines, and 
it's not just that people aren't logging out?

Second, are you sure that you upgraded the phplib that you are using as well?

-chuck

--
Charles Hagenbuch, <chuck@horde.org>
Black and white and grey, all the shades of truth.