Session management

This commit is contained in:
Marcus Hill 2022-01-15 21:26:22 +00:00
parent 272bf52d62
commit 2b3a7171b3
2 changed files with 9 additions and 3 deletions

View File

@ -24,9 +24,10 @@ if($config_https_only){
ini_set("session.cookie_secure", True);
}
session_start();
if(isset($_POST['login'])){
// Sessions should start after the user has POSTed data
session_start();
$email = strip_tags(mysqli_real_escape_string($mysqli,$_POST['email']));
$password = $_POST['password'];

View File

@ -6640,12 +6640,17 @@ if(isset($_GET['export_client_pdf'])){
if(isset($_GET['logout'])){
mysqli_query($mysqli,"INSERT INTO logs SET log_type = 'Logout', log_action = 'Success', log_description = '$session_name logged out', log_ip = '$session_ip', log_user_agent = '$session_user_agent', log_created_at = NOW(), log_user_id = $session_user_id");
mysqli_query($mysqli, "UPDATE users SET user_php_session = '' WHERE user_id = '$session_user_id'");
session_start();
setcookie("PHPSESSID", '', time() - 3600, "/");
unset($_COOKIE['PHPSESSID']);
setcookie("user_encryption_session_key", '', time() - 3600, "/");
unset($_COOKIE['user_encryption_session_key']);
setcookie("user_extension_key", '', time() - 3600, "/");
unset($_COOKIE['user_extension_key']);
session_unset();
session_destroy();