Hello Darrick,
On Friday, June 11, 2004, [EMAIL PROTECTED] wrote...

> I have two windows of the program open.  I am composing the message in a
> new window.  I go 'back' in the old window and bring up the login screen
> (or go by, but as soon as I've done this I am doomed because I am now
> logged out!)  Since I don't realize that this has happened, when I try to
> send the message I get the 'you are currently logged out' screen. Nothing
> I can do can bring back my old message at this point.

That's because the login page destroys any existing sessions, and
starts afresh... This is to try stopping session corruption, and
people from easily breaking into other peoples accounts (I've seen a
lot of people just hit the back button to get to the login page
again).

[..]
> It seems to me that if the request to send a message comes from a
> signed out client, the client must know already what it has sent
> you, so it would not be a breach of security to bring up a screen as
> follows:

> You are not currently logged in ... etc.  Here is the text of the message
> you tried to send:

> To:
> CC:
> bcc:
> subject:
> body:
> ...
> ...

And what if you're in a public library where there is a host of
computers, and somebody just reloads the window? Hrm... it WOULD be a
security concern ;)

-- 
Jonathan Angliss
([EMAIL PROTECTED])

Posting Hints: http://www.squirrelmail.org/wiki/en_US/MailingListPostingGuidelines



-------------------------------------------------------
This SF.Net email is sponsored by the new InstallShield X.
>From Windows to Linux, servers to mobile, InstallShield X is the
one installation-authoring solution that does it all. Learn more and
evaluate today! http://www.installshield.com/Dev2Dev/0504
--
squirrelmail-users mailing list
List Address: [EMAIL PROTECTED]
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to