Changeset 2179

Timestamp:

03/07/10 09:47:57 (14 years ago)

Author:

niltonneto

Message:

Ticket #922 - Forçar expirar sessão ao invalidar a mesma.

File:

• branches/2.1/header.session.inc.php (modified) (1 diff)

branches/2.1/header.session.inc.php

@@ -9 +9 @@
 
 
-        if ($_SESSION['connection_db_info']['user_auth'] && implode('',$_SESSION['connection_db_info']['user_auth']) !== $connection_id)
+        if (empty($_SESSION['phpgw_session']['session_id']) || ($_SESSION['connection_db_info']['user_auth'] && implode('',$_SESSION['connection_db_info']['user_auth']) !== $connection_id))
         {
-                error_log( '[ NOT VALIDATED SESSION ] >>>>' . implode('',$_SESSION['connection_db_info']['user_auth']) . '<<<< - >>>>' . $connection_id . '<<<<', 0 );
+                if($_SESSION['connection_db_info']['user_auth'])
+                        error_log( '[ INVALID SESSION ] >>>>' . implode('',$_SESSION['connection_db_info']['user_auth']) . '<<<< - >>>>' . $connection_id . '<<<<', 0 );
                 setcookie("PHPSESSID","",0);
                 setcookie ("sessionid","",0);   
-                require_once dirname( __FILE__ ) . '/logout.php';
-                exit;
+                unset($_SESSION);
         }
 ?>