Hi!

I think I've found a problem with SecurePage.py. The information on valid 
users is stored in a session object. For security reasons, sessions 
expire after a certain amount of time. Unfortunately, SecurePage does
not take this into account.

This problem has occured when someone loaded data from a form, processed 
them and tried to upload them again after the session had expired. The
Application presented him with a "session expired" message, but processed
part of the data, which leaved the whole system in a rather instable state 
:-(

I think these problems can only be avoided if any call to self.session()
is wrapped up in a try-catch-statement.

        Regards,

                Albert

_______________________________________________
Webware-discuss mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/webware-discuss

Reply via email to