ekatsah / proj402

Source code of cerkinfo's courses plateform
cours.cerkinfo.be
8 stars 6 forks source link

Disconnection only partial #91

Open haxelion opened 12 years ago

haxelion commented 12 years ago

When you click on disconnect you are indeed disconnected from proj402. But the connection cookies from the ulb are not cleared so if you click on login again you are immediately connected without the need of entering your netid/pass.

I don't know how much time these cookies take to expire, but it's session stealing made easy ^^