On Fri, 2006-02-03 at 10:36, Ralf Hildebrandt wrote:
[.........]
> It seems we're seeing the same. Would you care to share your patch
> that disallows the "(deleted)" SID?

As I said, we use our own sessions_handler and a database to store the
sessions data. We did not patch squirrelmail code but our
sessions_handler.

I am sending an attachment with our sessions_handler. We log when an
user has this problem and a lot of information about when, who, from
where, etc. You do not need this so you can take it away and make the
code more simple.

We have been using this sessions_handler for a long time and it works
without problems, we have around 700.000 logins and more than 23.000
different users a month in the system. Remember to run VACUUM ANALYZE
often if you use postgresql (we do it every 15 min)

The best thing would be that the check for the SID gets implemented in
squirrelmail code.

-- 
Rafael Martinez, <[EMAIL PROTECTED]>
Center for Information Technology Services
University of Oslo, Norway

PGP Public Key: http://folk.uio.no/rafael/

Attachment: sessions_handler.php
Description: application/php

Reply via email to