[SGVLUG] Plone

[Dustin]

On Wed, 20 Jul 2005, Emerson, Tom wrote:

> This is probably a "cookie" issue -- generally the server will issue you
> a cookie stating "you're logged in", which your browser dutifully sends
> on every subsequent request.  When you "log out", theoretically the
> server should send some directive to DELETE the cookie, but I don't
> think there is such a directive to do this in the first place.  Also,
> since you indicate this "clears up" when you physically exit the
> browser, it suggests that this is actually a "session temporary" cookie
> (has an expiration time of -1, I believe) which the client might NOT be
> "deleting" if the server does indeed have a way of saying "this cookie
> has gone stale -- dump it"

I thought so too, but on the other hand I cleared all cookies at one point
and was still logged in.

Dustin