PEAR is archived and read-only

This mirror preserves historical PEAR package releases and metadata so existing references remain available.

Home » Authentication » Auth » Bug #2321

Serious Reload authentication bug

Details

Submitted2004-09-13 12:48 UTC
Fromttoth_work at yahoo dot com
StatusBogus
PackageAuth
PHP Version4.3.2
OSWin NT 4.0
Roadmaps(Not assigned)

Comments

[2004-09-13 12:48 UTC] ttoth_work at yahoo dot com

Description:
------------
I use auth 1.2.3 with PEAR 1.3.1
Code (easy!):

I am using Opera 7.11 and IE5.5, and I enter user name/pw into the input boxes, after 7-10 seconds hit reload, I get a form back, correctly, with the session expired message.
If I hit reload again, the internal page comes back (You should not see this when expired".

Is that possible to prevent?

Reproduce code:
---------------
require_once "Auth/Auth.php";
$a = new Auth("xxx","xxxxx");
$a->setexpire(15,true);
$a->start();
if ($a->getAuth()) {
echo "You chould not see this when expired";
}