deinitialize session in login_sequence() instead of sessions.php

12 years ago · 4ad99f23ff
parent 6f431804a9
commit 4ad99f23ff
1 changed files with 5 additions and 0 deletions
--- a/include/functions.php
+++ b/include/functions.php
@ -754,6 +754,11 @@

 				if (!$_SESSION["uid"]) render_login_form($link);

+				@session_destroy();
+				setcookie(session_name(), '', time()-42000, '/');
+
+				exit;
+
 			} else {
 				/* bump login timestamp */
 				db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .