Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Is logoff feature necessary May 02 2006 04:32PM
Dave Ferguson (gmdavef gmail com)
Closing the browser doesn't do anything on the server side, unless
there's some sort of ugliness with javascript going on. If a
server-side session is being created, you definitely want to have a
Logout function - and make sure it invalidates/deletes the session.
I've looked at too many apps where...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus