> wow!  you are right. I tried it by copying the url shutting down all
> browsers opening the back up and I was able to login.
> I though I read somewhere that this was fixed... I guess not.

It can't be fixed... that's the way http session management works. The
only way to end a URL-tracked session is to 1) timeout due to inactivity,
or 2) logout of webmail. I'd recommend you tell your users to do the
latter if they're on a public client.

Ron Hornbaker
President/CTO
  .  .  .  .  .  .  .  .  .  .  .  .  http://humankindsystems.com
  .  .  .  .  .  .  .  .  .  .  .  .  w e  c o d e.  w e  c a r e.

  .  http://AnswerTrack.com - eCRM email tracking solution
  .  http://KillerWebMail.com - the name says it all
  .  http://hksi.net/products - EZSignUp, You'veGotIMail!, etc...
  .  http://hksi.net/testimonials - 2,349 admins can't be wrong




Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Reply via email to