Users are authenticated despite cookie check failure.

This may be an issue with one or more of the other modules you are using. They may be displaying menus when they should not.

If the cookies are disabled in the browser and i try to login, the module display an error message - ok. The problem is, all menu items of the navigation menu display in the sidbar, without access.

Evan I have enabled Global Redirect to didn`t show links if someone is not log in, but it`s show -only with this module.

Thanks

Yeah, I had this bug, too, but in D5. The cookie check validator is not killing the user session that is established by the core login validator, so admin menu properly assumes that you're logged in.

In D5, You can add something like this to cookie_check.module before the form_set_error call:

global $user;
if ($user->uid > 0) {
sess_destroy_uid($user->uid);
$user = drupal_anonymous_user();
}

Haven't checked the D6 api, but it's probably the same or similar.

This error results from adding the validation callback at the end of the array. It needs to come before 'user_login_authenticate_validate' so that it can register an error, preventing user authentication.

Committed a fix.

I am having this error on D6.

When I turn off cookies and login, it redirects me to my 403 (access denied) page. However, if I use an invalid username and also have cookies turned off it shows me the correct message and I remain on the login page.

Any ideas what I might be doing wrong?