Re: Is logoff feature necessary

["Dave Ferguson" <gmdavef () gmail com>]

Closing the browser doesn't do anything on the server side, unless
there's some sort of ugliness with javascript going on.  If a
server-side session is being created, you definitely want to have a
Logout function - and make sure it invalidates/deletes the session. 
I've looked at too many apps where you logout, then use your browser's
back button, and you can start using the app again!  Anyway, if there
is authentication happening (i.e., username and password inputs),
users are going to expect a Logout button and will complain or wonder
why there isn't one.

Dave Ferguson

On 2 May 2006 07:41:02 -0000, test.future () gmail com
<test.future () gmail com> wrote:
> We have a web applicaiton which do not have logoff button. The developer claims that it is unnecessary, since the 
> session can be terminated by closing the browser. Is it correct? Thanks.
>
> -------------------------------------------------------------------------
> Sponsored by: Watchfire
>
> The Twelve Most Common Application-level Hack Attacks
> Hackers continue to add billions to the cost of doing business online
> despite security executives' efforts to prevent malicious attacks. This
> whitepaper identifies the most common methods of attacks that we have seen,
> and outlines a guideline for developing secure web applications.
> Download this whitepaper today!
>
> https://www.watchfire.com/securearea/whitepapers.aspx?id=701300000007t9r
> --------------------------------------------------------------------------

-------------------------------------------------------------------------
Sponsored by: Watchfire

The Twelve Most Common Application-level Hack Attacks
Hackers continue to add billions to the cost of doing business online
despite security executives' efforts to prevent malicious attacks. This
whitepaper identifies the most common methods of attacks that we have seen,
and outlines a guideline for developing secure web applications.
Download this whitepaper today!

https://www.watchfire.com/securearea/whitepapers.aspx?id=701300000007t9r
--------------------------------------------------------------------------