Exson: Fixed the DB_escape_string bug for Array in session.inc and de…

…stroy cookie while users log out in Logout.php
webERP-team · Feb 27, 2018 · 631d6ae · 631d6ae
1 parent ee8e7eb
commit 631d6ae
Show file tree

Hide file tree

Showing 3 changed files with 5 additions and 2 deletions.
diff --git a/Logout.php b/Logout.php
@@ -9,4 +9,6 @@
 // Cleanup
 session_unset();
 session_destroy();
+setcookie('PHPSESSID',"",time()-3600,'/');
+
 ?>
diff --git a/doc/Change.log b/doc/Change.log
@@ -1,5 +1,5 @@
 webERP Change Log
-
+17/02/18 Exson: Fixed the DB_escape_string bug for Array in session.inc and destroy cookie while users log out in Logout.php
 16/2/18  Paul Becker (PaulT commit): header.php: Add link to the Dashboard in the AppInfoUserDiv. (Forum contribution: http://www.weberp.org/forum/showthread.php?tid=8100)
 16/2/18  PaulT: Remove unused $db parameter from many functions within the /api area.
 16/2/18  PaulT: upgrade4.14.1-4.14.2.sql: Add SQL update to support commit 7961.

diff --git a/includes/session.php b/includes/session.php
@@ -63,7 +63,8 @@
 				if(get_magic_quotes_gpc()) {
 					$PostVariableValue[$PostArrayKey] = stripslashes($value[$PostArrayKey]);
 				}
-				$PostVariableValue[$PostArrayKey] = DB_escape_string(htmlspecialchars($PostArrayValue,ENT_QUOTES,'UTF-8'));
+			 	$_POST[$PostVariableName][$PostArrayKey] = DB_escape_string(htmlspecialchars($PostArrayValue,ENT_QUOTES,'UTF-8'));
+
 			}
 		}
 	}