[imp] "Logout" does not effectively end session.
Christopher Crowley
ccrowley@tulane.edu
Thu, 30 May 2002 16:27:30 -0500
Here's the situation that I am seeing.
The server's configuration is set to use IMP to authenticate the session.
If I go to https://server/horde and log on to this page ( as opposed to
browsing to https://server/horde/imp ) I can select "Logout" then use the
back button, and read mail, open my inbox, open the calendar...
This problem doesn't seem to occur if I start at https://server/horde/imp .
So, is there a way to force users to start at imp?
I have tried this with both shm and sql sessions management.
I don't think that this has been reported previously.