On Sep 30, 2011, at 17:58 , Stephan Beal wrote: > Multiple login sessions will require that some fields be migrated out of the > user table and into a new table. The anon user does not store the cookie data > in the user table (because it would log out all other anonymous users), using > only the cookie for validation.
I'm thinking about reusing the current "cookie" column for the per-user secret key. But this will require careful handling of migrations to avoid introducing security bugs. Not sure what's better. -- Dmitry Chestnykh _______________________________________________ fossil-users mailing list fossil-users@lists.fossil-scm.org http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
