[imp] "Logout" does not effectively end session.

Christopher Crowley ccrowley@tulane.edu
Thu, 30 May 2002 16:27:30 -0500


Here's the situation that I am seeing.

The server's configuration is set to use IMP to authenticate the session.

If I go to https://server/horde and log on to this page ( as opposed to
browsing to https://server/horde/imp ) I can select "Logout" then use the
back button, and read mail, open my inbox, open the calendar...

This problem doesn't seem to occur if I start at https://server/horde/imp .
So, is there a way to force users to start at imp?

I have tried this with both shm and sql sessions management.

I don't think that this has been reported previously.