[pmwiki-users] Possibly serious bug with passworded pages

Robin robin at kallisti.net.nz
Sat Apr 2 06:50:41 CST 2005


This may be the result of an interaction with wikilog, but I just filled 
in a wikilog entry on a read-write passworded page, and took long enough 
to write it that the session expired. When I hit 'post', it asked me for 
a password. Fortunately I got suspicious at that, hit back, copied the 
text into the clipboard, and hit post again. When I entered the password, 
the post I'd written had gone (and wasn't actually posted).

This might be something that needs to be dealt with: ideally if the 
session has expired, the password page should store the operation, and 
when the login was successful, it should replay the post (or some 
equivalent operation) so that the data gets stored.

-- 
Robin <robin at kallisti.net.nz>             JabberID: <eythian at jabber.org>

Hostes alienigeni me abduxerunt. Qui annus est?

PGP Key 0xA99CEB6D = 5957 6D23 8B16 EFAB FEF8  7175 14D3 6485 A99C EB6D
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/pmwiki-users/attachments/20050403/c6c36e66/attachment.bin 


More information about the pmwiki-users mailing list