>>>>> "Jon" == Jon Carnes <[EMAIL PROTECTED]> writes:

    Jon> The browser connection manages to create the lock files but
    Jon> then it stops and refuses to authenticate.  I'm fairly
    Jon> certain it is using an old cookie at this point.

Well, the obvious and pleasant solution is

1)  reverse the order of authentication and lockfile creation
    This is an exploitable security hole, seems to me.

2)  if the cookie is expired and the bruiser is Exploder, post a page
    explaining the bug and giving download links for real browsers. :-)



-- 
Institute of Policy and Planning Sciences     http://turnbull.sk.tsukuba.ac.jp
University of Tsukuba                    Tennodai 1-1-1 Tsukuba 305-8573 JAPAN
              Don't ask how you can "do" free software business;
              ask what your business can "do for" free software.

------------------------------------------------------
Mailman-Users maillist  -  [EMAIL PROTECTED]
http://mail.python.org/mailman/listinfo/mailman-users

Reply via email to