From 9e5b61498c8bec4468281854586336ac06f16a19 Mon Sep 17 00:00:00 2001 From: Stefan Ritt Date: Fri, 16 Mar 2012 08:11:39 +0000 Subject: [PATCH] Remove cookies when user is logged out SVN revision: 2444 --- src/elogd.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/elogd.c b/src/elogd.c index 1e9cdfa1..d58fa6c6 100755 --- a/src/elogd.c +++ b/src/elogd.c @@ -19562,10 +19562,12 @@ void show_elog_list(LOGBOOK * lbs, int past_n, int last_n, int page_n, BOOL defa return; } - /*---- if user present but not allowed, remove it (required when several logbooks are + /*---- if user present but not allowed, log it out (required when several logbooks are used with different access rights and global passwords ----*/ if (isparam("unm") && !check_login_user(lbs, getparam("unm"))) { unsetparam("unm"); + sid_remove(getparam("sid")); + set_sid_cookie(lbs, "", ""); } /*---- apply last login cut ----*/