phplib-users

[Phplib-users] Does it matter

[Giancarlo <gia...@na...>]

If you click on this (within 1440 min from now I guess) you find
yourself logged in as kris with admin permissions

http://phplib.sourceforge.net/showroom/index.php3?Poe_Session=kristest

Isn't it worrysome? What should I do as a phplib core developer? Maybe this 
list is broken.

Giancarlo

[Phplib-users] Does it matter

[Giancarlo <gia...@na...>]

It doesn't seem 24 hours, but slightly more than 5 minutes.
Can anyone make  a test?
And anyway, for those that do not enforce login_expire, IS worrying

http://phplib.sourceforge.net/showroom/auth.php3?mode=log&Poe_Session=kristest

You can do your own tests by creating new sessions, 
http://phplib.sourceforge.net/showroom/auth.php3?mode=reg&Poe_Session=ohoo

and play with ithem, or even let  phplib create his own, append it to url and 
pass it to some without a previous cookie

Giancarlo