What version of the session_manager plugin are you running? I don't see a 
version that had been tagged for 0.6 (there's an old 0.5 version and a branch 
for 0.7).

Glancing at the code, it's a really simple plugin. There's no way it's going to 
open up your admin for public access, so you don't need to worry about that. As 
a wild guess, I would suspect that one of the spiders in your list happened to 
match your browser's User Agent. Since the plugin simply prevents a session 
from being written to the database if you were already logged in and were 
trying to log out it wouldn't be able to write to the db that you were no 
longer logged in (ie: delete the session).

Double check your list of spiders to ignore and make sure there's nothing that 
could match your browser - maybe just an overly zealous wildcard?

On Nov 14, 2010, at 7:38 AM, Scorpion wrote:

> With regard to a recent question I posted in the now defunct Habari
> forum regarding mysterious log errors, rickc advised me to install the
> session_manager plugin. I just did so on my local install ( running
> 0.6.4 ) and all seemed fine until I wanted to logout. I couldn't,
> whatever I tried !
> Since to only change I had made was activating said plugin, I
> deactivated & removed it. Not quite surprisingly logging out then
> functioned again as expected.
> Obviously I'm not keen on showing my real world blog ( 
> http://www.bluesmaster.nl
> ) with admin access open, so I'll refrain from using the plugin until
> this is solved.. Any insights are much appreciated.
> 
> -- 
> To post to this group, send email to [email protected]
> To unsubscribe from this group, send email to 
> [email protected]
> For more options, visit this group at 
> http://groups.google.com/group/habari-users

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to