source: branches/2.0/header.session.inc.php @ 2178

Revision 2178, 740 bytes checked in by niltonneto, 14 years ago (diff)

Ticket #922 - Forçar expirar sessão ao invalidar a mesma.

RevLine 
[1040]1<?php
[2075]2        if ( isset( $_COOKIE[ 'sessionid' ] ) )
3                session_id( $_COOKIE[ 'sessionid' ] );
4
[1061]5        session_start( );
[1040]6
[1061]7        $sess = $_SESSION[ 'phpgw_session' ];
[1469]8        $connection_id = "{$sess['session_id']}{$sess['session_ip']}".substr($_SERVER[ 'HTTP_USER_AGENT' ],0,199);
[1040]9
[1469]10
[2178]11        if (empty($_SESSION['phpgw_session']['session_id']) || ($_SESSION['connection_db_info']['user_auth'] && implode('',$_SESSION['connection_db_info']['user_auth']) !== $connection_id))
[1040]12        {
[2178]13                if($_SESSION['connection_db_info']['user_auth'])
14                        error_log( '[ INVALID SESSION ] >>>>' . implode('',$_SESSION['connection_db_info']['user_auth']) . '<<<< - >>>>' . $connection_id . '<<<<', 0 );
[1161]15                setcookie("PHPSESSID","",0);
[2075]16                setcookie ("sessionid","",0);   
[2178]17                unset($_SESSION);
[1040]18        }
19?>
Note: See TracBrowser for help on using the repository browser.