source: branches/2.1/header.session.inc.php @ 2179

Revision 2179, 740 bytes checked in by niltonneto, 14 years ago (diff)

Ticket #922 - Forçar expirar sessão ao invalidar a mesma.

RevLine 
[1040]1<?php
[2076]2        if ( isset( $_COOKIE[ 'sessionid' ] ) )
3                session_id( $_COOKIE[ 'sessionid' ] );
4
[1061]5        session_start( );
[1040]6
[1061]7        $sess = $_SESSION[ 'phpgw_session' ];
[1464]8        $connection_id = "{$sess['session_id']}{$sess['session_ip']}".substr($_SERVER[ 'HTTP_USER_AGENT' ],0,199);
[1040]9
[1464]10
[2179]11        if (empty($_SESSION['phpgw_session']['session_id']) || ($_SESSION['connection_db_info']['user_auth'] && implode('',$_SESSION['connection_db_info']['user_auth']) !== $connection_id))
[1040]12        {
[2179]13                if($_SESSION['connection_db_info']['user_auth'])
14                        error_log( '[ INVALID SESSION ] >>>>' . implode('',$_SESSION['connection_db_info']['user_auth']) . '<<<< - >>>>' . $connection_id . '<<<<', 0 );
[1161]15                setcookie("PHPSESSID","",0);
[2076]16                setcookie ("sessionid","",0);   
[2179]17                unset($_SESSION);
[1040]18        }
19?>
Note: See TracBrowser for help on using the repository browser.