On Sat, 29 Jul 2006, Tomas Kuliavas wrote: > https://sourceforge.net/tracker/index.php?func=detail&aid=1462110&group_id=311&atid=100311 > > I think IE uses 'deleted' session id, when computer clock is not correct. > Can't reproduce it on WinXP SP2 Hmm.. So this seems even more serious than I initially though. The bug report implies that the users can also see each others mail boxes. Even if this can't be reproduced in SP2, I can't really control if my users have their machines updated to SP2 any more than I can control their system clocks unfortunately. Are there plans (or even the possibility) to tighten up the cookies so this isn't at all possible? Thanks for the attention to this and the quick responses. Matt Ruzicka - Senior Systems Administrator Front Range Internet, Inc. matt@xxxxxxxx - (970) 212-0728 ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
