Jolle Carlestam wrote on 11/5/2008 4:11 AM:
> As it is now if a user attempts to login and fails while there´s still a
> valid session he´s still logged in with the present credentials.
> I suggest, for enhanced security that a failed login attempt always
> should be treated as a failure even if there's a valid session in place.
> This would take care of the situation where a user leaves a computer
> without logging out and another user attempts to login and fails.

When visiting the login page, all existing sessions should be terminated. Then if the user successfully logs in again, then they get a new session.


- Bil


#############################################################
This message is sent to you because you are subscribed to
the mailing list <knop@lists.montania.se>.
To unsubscribe, E-mail to: <knop-off@lists.montania.se>
Send administrative queries to <knop-request@lists.montania.se>
List archive http://www.nabble.com/Knop-Framework-Discussion-f29076.html
Project homepage http://montania.se/projects/knop/
Google Code has the latest downloads at http://code.google.com/p/knop/