id,summary,reporter,owner,description,type,status,component,version,severity,resolution,keywords,cc,stage,has_patch,needs_docs,needs_tests,needs_better_patch,easy,ui_ux 19327,Admin doesn't handle double login attempts,Krzysztof Jurewicz,Krzysztof Jurewicz,"When sending login form on admin site when user is already logged in, admin view gets called as if no login attempt was being made. Login form POST data can then easily cause some of the admin views to break. Furthermore, sensitive_post_parameters decorator isn't applied because login view doesn't get called, so if an exception is raised, a traceback is emailed with username and password in plain text. A real life example would be when user opens 2 tabs with login form, logs in on one of them and then forgets about it and tries to log in on the second.",Bug,closed,contrib.admin,dev,Normal,fixed,"sensitive_post_parameters, login",Krzysztof Jurewicz,Accepted,1,0,0,1,1,0