phpgroupware-users
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Phpgroupware-users] Re: FAQ? and admin authentication bugs (addendum)


From: Patrick Price
Subject: [Phpgroupware-users] Re: FAQ? and admin authentication bugs (addendum)
Date: Mon, 09 Sep 2002 23:45:57 -0400
User-agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.0rc2) Gecko/20020618 Netscape/7.0b1

The other problem with the admin authentication - pages are cached:

I can be in admin/config (or header admin) and select Logout.

Going to /phpgroupware/setup gives me login screen. It *appears* that I am logged out..

Click Back button on browser (IE 5.5) to the cached admin screen.

Reload/Refresh page re-authenticates me without password and logs me back in somehow (hidden form vars?). If you don't hit refresh you don't get reauthenticated - you'll see the page but cannot do anything without login screen coming back up.

Enter the URL /phpgroupware/setup and BOOM! - gives me admin/config screen with full access to all functions *in spite of my having logged out*.

Logout doesn't work like I think it should. Am I wrong or should I not be able to do all this?

Patrick Price
West Virginia University







reply via email to

[Prev in Thread] Current Thread [Next in Thread]