id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
19327	Admin doesn't handle double login attempts	Krzysztof Jurewicz	Krzysztof Jurewicz	"When sending login form on admin site when user is already logged in, admin view gets called as if no login attempt was being made. Login form POST data can then easily cause some of the admin views to break. Furthermore, sensitive_post_parameters decorator isn't applied because login view doesn't get called, so if an exception is raised, a traceback is emailed with username and password in plain text.

A real life example would be when user opens 2 tabs with login form, logs in on one of them and then forgets about it and tries to log in on the second."	Bug	closed	contrib.admin	dev	Normal	fixed	sensitive_post_parameters, login	Krzysztof Jurewicz	Accepted	1	0	0	1	1	0