[imp] "Logout" does not effectively end session.

[Christopher Crowley]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ----- Original Message ----- 
From: "Jan Schneider" <jan@horde.org>

> Sorry, I can't reproduce this. I tried all logout buttons with
> Horde 2.1/IMP 3.1 but everytime I hit the back button after that I
> get a 'your session has expired'.


The way that it occurs for me is: 

 1. I browse to https://server:9443/horde and log in.
 2. But IMP is set to handle the authentication.
 3. I click on 'Webmail' to view my message list.
 4. I select 'Logout' from the menu bar (either the top IMP bar or
the bottom HORDE bar)
 5. I am returned to https://server:9443/horde 
 6. I modify the URL to read https://server:9443/horde/imp  
        (the same behavior occurs when clicking back to see the
inbox, then selecting a message)
 7. I am returned to my INBOX, and can view messages.


What seems to be occurring is that HORDE is registering a session in
the session table, but the session cannot be removed.  Suggestions
for how to test/troubleshoot this? I will continue to inspect it
here.

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPPzEWs0q7cR88Y/bEQL7+QCfafmoDXaYs49HGwmLBdES890ahqIAoP43
FNrD+z/0wcntQ0Nvq6jMrT1/
=KsSS
-----END PGP SIGNATURE-----