[imp] "Logout" does not effectively end session.

[Jan Schneider]

Zitat von Christopher Crowley <ccrowley@tulane.edu>:

> Here's the situation that I am seeing.
> 
> The server's configuration is set to use IMP to authenticate the session.
> 
> If I go to https://server/horde and log on to this page ( as opposed to
> browsing to https://server/horde/imp ) I can select "Logout" then use the
> back button, and read mail, open my inbox, open the calendar...
> 
> This problem doesn't seem to occur if I start at https://server/horde/imp
> .
> So, is there a way to force users to start at imp?
> 
> I have tried this with both shm and sql sessions management.
> 
> I don't think that this has been reported previously.

What versions?

Jan.

--
http://www.horde.org - The Horde Project
http://www.ammma.de - discover your knowledge
http://www.tip4all.de - Deine private Tippgemeinschaft