Serendipity Forums

Hi,

found something again.

If the member wants to logout she/he clicks on the logout-Text, but if this person uses the goback-function in any browser, the user is logged in without typing the user ans password.

I guess that is not correct.

Yes, that can happen if you go back and your browser posts the same request with the old cookie code to relogin.

There's not to be done to do about that, if the user logged in properly before, his login can be stored in a cookie (if he checked "remember me").

Regards,
Garvin