«
Back
Issue #118
- 2010-07-18 17:50 Reported by administrator
- 2010-07-19 09:55 Marked fixed
Status:
Marked fixed
Priority: Medium
Possible to get around expired sessions
(c) 2026 Seekquarry - Open Source Search Engine Software
If a person is logged in, but inactive for a long time, it is possible to defeat the session expiry
Steps to reproduce: Suppose on search screen after having logged in. Even if the session is expired one can click on the YIOOP link then click on admin and get in as if the session had not expired.
Additional information: Fixed with commit 82e6b792dcadc1d08b2c628f6f875fcf01339f6b
Really fixed in commit 1506f43. PRior fix to aggressively logged people out