PEAR is discontinued

This is a static archive preserving historical releases and metadata. No new packages or updates will be published. For updates to existing packages, or to publish new packages, please use Composer and Packagist.

Home » Authentication » Auth » Bug #2321

Serious Reload authentication bug

Details

Submitted2004-09-13 12:48 UTC
Fromttoth_work at yahoo dot com
StatusBogus
PackageAuth
PHP Version4.3.2
OSWin NT 4.0
Roadmaps(Not assigned)

Comments

[2004-09-13 12:48 UTC] ttoth_work at yahoo dot com

Description:
------------
I use auth 1.2.3 with PEAR 1.3.1
Code (easy!):

I am using Opera 7.11 and IE5.5, and I enter user name/pw into the input boxes, after 7-10 seconds hit reload, I get a form back, correctly, with the session expired message.
If I hit reload again, the internal page comes back (You should not see this when expired".

Is that possible to prevent?

Reproduce code:
---------------
require_once "Auth/Auth.php";
$a = new Auth("xxx","xxxxx");
$a->setexpire(15,true);
$a->start();
if ($a->getAuth()) {
echo "You chould not see this when expired";
}