[imp] "Logout" does not effectively end session.

Jan Schneider jan@horde.org
Fri, 31 May 2002 11:58:25 +0200

Zitat von Christopher Crowley <ccrowley@tulane.edu>:

> Here's the situation that I am seeing.
> The server's configuration is set to use IMP to authenticate the session.
> If I go to https://server/horde and log on to this page ( as opposed to
> browsing to https://server/horde/imp ) I can select "Logout" then use the
> back button, and read mail, open my inbox, open the calendar...
> This problem doesn't seem to occur if I start at https://server/horde/imp
> .
> So, is there a way to force users to start at imp?
> I have tried this with both shm and sql sessions management.
> I don't think that this has been reported previously.

What versions?


http://www.horde.org - The Horde Project
http://www.ammma.de - discover your knowledge
http://www.tip4all.de - Deine private Tippgemeinschaft