[ previous ] [ next ] [ threads ]
 From:  Jesse Guardiani <jesse at wingnet dot net>
 To:  m0n0wall dash dev at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall-dev] LogOut link
 Date:  Tue, 22 Feb 2005 09:23:03 -0500
On Tuesday 22 February 2005 3:02 am, vashdev Malhi wrote:
> Hi,
> I have installed m0n0 wall it working fine but i didn't find the logout link on managmnet page.

There isn't one. Close your browser to log out. This is a bug in various
browsers, not a problem with m0n0wall. M0n0wall uses HTTP AUTH to verify
usernames and passwords. There is no way for m0n0wall to reliably log the
user out as the username and password are stored on the browser side and
there is no session management in m0n0wall (for security purposes).

We could add session management, but PHP's session management capabilities
aren't exactly bug/exploit free, and it would bloat the code a bit.

Jesse Guardiani, Systems Administrator
WingNET Internet Services,
P.O. Box 2605 // Cleveland, TN 37320-2605
423-559-LINK (v)  423-559-5145 (f)