"Website security problem - severe"

When logged into Systemonline to book an appointment or prescription, should you foolishly fail to log out when leaving then your username and password remain onscreen and all someone has to do is select "login" and they cna see all your records.

This is a really bad lapse.

It should automatically log you out after a period of non-use and also clear the username and password.

It's difficult to think how long this has been the case without being rectified.

This form is inadequate for this sort of query as maybe one hasn't been to the surgery recently but the question is required but does not give a "Don't know" or "Not applicable" answer - and I couldn't find any other way to contact the surgery.