Home » Authentication » Auth » Bug #2321
Serious Reload authentication bug
Details
| Submitted | 2004-09-13 12:48 UTC |
|---|---|
| From | ttoth_work at yahoo dot com |
| Status | Bogus |
| Package | Auth |
| PHP Version | 4.3.2 |
| OS | Win NT 4.0 |
| Roadmaps | (Not assigned) |
Comments
[2004-09-13 12:48 UTC] ttoth_work at yahoo dot com
Description:
------------
I use auth 1.2.3 with PEAR 1.3.1
Code (easy!):
I am using Opera 7.11 and IE5.5, and I enter user name/pw into the input boxes, after 7-10 seconds hit reload, I get a form back, correctly, with the session expired message.
If I hit reload again, the internal page comes back (You should not see this when expired".
Is that possible to prevent?
Reproduce code:
---------------
require_once "Auth/Auth.php";
$a = new Auth("xxx","xxxxx");
$a->setexpire(15,true);
$a->start();
if ($a->getAuth()) {
echo "You chould not see this when expired";
}