Forum OpenACS Development: Re: Logout on browser close, missing important feature!

Collapse
12: Re: Logout on browser close, missing important feature! (response to 1)
Posted by Dave Bauer on 06/24/10 03:16 AM
Yes, the parameters are all already there, we just have to use them correctly.
Collapse
13: Re: Logout on browser close, missing important feature! (response to 12)
Posted by Gustaf Neumann on 06/24/10 11:35 AM
The following patches from March this year (in cvs head) made session cookies true session cookies (they are deleted on a browser close) and they avoid session hijacking

http://fisheye.openacs.org/changelog/OpenACS/openacs-4/packages/acs-tcl/tcl?cs=MAIN%3Agustafn%3A20100315001053
http://fisheye.openacs.org/changelog/OpenACS/openacs-4/packages/acs-tcl/tcl?cs=MAIN%3Agustafn%3A20100315000900