Roundcube Community Forum

 

Re-logging in bug

Started by Elmo, September 02, 2013, 01:52:54 PM

Previous topic - Next topic

Elmo

Hi, I have used roundcube with 2 webhosts now, and while I really like it I have noticed a bug which I think is important.

When you have been logged into your email for quite some time (webmail, not using email app on computer) and your activity has been idol, and then you come back to check your email and you hit "inbox" or whatever - you will be taken to the login page and asked to sign in again. I have noticed when this happens you don't have to put in your username (email address) or password as requested, you can literally type in a load of nonsense and you will be signed back into your account; you can literally type one or two letters into the username field and leave the password field blank and you will be signed back in.

in terms of security this doesn't fill me full of hope. has anyone else experienced this? I am on a mac (Intel core duo), OSX 10.5.8, using firefox 16.0.2, and have noticed it also on older versions of firefox.

Thanks.

SKaero

What version of RoundCube, it works fine for me.

Elmo


SKaero


Elmo

Its webmail supplied by my webhosting company, its not an application on my computer, how can I update?

Thanks

SKaero

In that case you can't update RoundCube although you could install your own copy.

Elmo

Seems like a flaw in the system, not something I'm doing. I'll have to test on other computers/ browsers to know for sure.

Are there advantages to me using the desktop client as opposed to using the webmail?

Thanks

SKaero

RoundCube is only a webmail client not a desktop client.