Fix session destruction on logout (refs #3721)

Now clearing the whole session, instead of only some basic vars
Icinga · Feb 20, 2013 · 57bfa5d · 57bfa5d
1 parent 480898c
commit 57bfa5d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/modules/AppKit/lib/auth/AppKitSecurityUser.class.php b/app/modules/AppKit/lib/auth/AppKitSecurityUser.class.php
@@ -169,6 +169,9 @@ public function doLogout() {
         $this->clearCredentials();
         $this->setAuthenticated(false);
 
+        // destroy the session with all settings
+        session_destroy();
+
         $this->getContext()->getLoggerManager()
         ->log(sprintf('User %s (%s) logged out!', $this->getAttribute('userobj')->user_name, $this->getAttribute('userobj')->givenName()), AgaviLogger::INFO);