I'll re-confirm this bug in the current dapper version. This presents a serious security risk. Please make a patch available through the official repo. -- Can't logout from a Drupal session https://launchpad.net/bugs/4035