Tickets :: Comment on [#11550] cookie does not set path information and http status codes are wrong

* Your Email Address
* Spam protection	Enter the letters below: .._..__ \ /.___ \| \| [__) >< [__ \__\|_\|_[__)/ \[___
Comment	> The cookie path is not set for horde webmailer, so the cookies are > sent to every part of the domain. This causes the abbility to steal > my login for other users of the server. > > Also on logout the cookie is not destroyed. > > And Horde does not use HTTP properly as defined in RFC 2616. > I am not able to see if login was successfull because even on login > failure there is sent a 200 OK response code. > > i would like to see changes in horde 4.0.9
Attachment
Watch this ticket