• last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Typo: acs_acs_kernel_id

changing the proc security::RestrictLoginToSSLP to only return 1 if https is available on the server.

- Fixed bug that caused logins to timeout very quickly if you had LoginTimeout set to 0 (infinite - logins never expire), but the user did not check 'Remember me' checkbox. This is a fix that sacrifices some security, but fixes the unacceptable usability problem. See bboard posting at http://openacs.org/forums/message-view?message_id=167212. Also cleaned up debugging statements

adding db_release_unused_handles after each db statement in the security procs. The server would sometimes hang while in the sec_handler proc, supposedly because db handles were not being released and threads were held up waiting for them. Thanks Lars for tracking this down.