On Fri, 2006-02-03 at 10:36, Ralf Hildebrandt wrote: [.........] > It seems we're seeing the same. Would you care to share your patch > that disallows the "(deleted)" SID?
As I said, we use our own sessions_handler and a database to store the sessions data. We did not patch squirrelmail code but our sessions_handler. I am sending an attachment with our sessions_handler. We log when an user has this problem and a lot of information about when, who, from where, etc. You do not need this so you can take it away and make the code more simple. We have been using this sessions_handler for a long time and it works without problems, we have around 700.000 logins and more than 23.000 different users a month in the system. Remember to run VACUUM ANALYZE often if you use postgresql (we do it every 15 min) The best thing would be that the check for the SID gets implemented in squirrelmail code. -- Rafael Martinez, <[EMAIL PROTECTED]> Center for Information Technology Services University of Oslo, Norway PGP Public Key: http://folk.uio.no/rafael/
sessions_handler.php
Description: application/php