| 1 | <?php
 | 
  
    | 2 | 
 | 
  
    | 3 | // $Id: index.php 932 2009-02-16 18:36:44Z doc $
 | 
  
    | 4 | 
 | 
  
    | 5 | /*
 | 
  
    | 6 | 
 | 
  
    | 7 |  Website Baker Project <http://www.websitebaker.org/>
 | 
  
    | 8 |  Copyright (C) 2004-2009, Ryan Djurovich
 | 
  
    | 9 | 
 | 
  
    | 10 |  Website Baker is free software; you can redistribute it and/or modify
 | 
  
    | 11 |  it under the terms of the GNU General Public License as published by
 | 
  
    | 12 |  the Free Software Foundation; either version 2 of the License, or
 | 
  
    | 13 |  (at your option) any later version.
 | 
  
    | 14 | 
 | 
  
    | 15 |  Website Baker is distributed in the hope that it will be useful,
 | 
  
    | 16 |  but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
  
    | 17 |  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
  
    | 18 |  GNU General Public License for more details.
 | 
  
    | 19 | 
 | 
  
    | 20 |  You should have received a copy of the GNU General Public License
 | 
  
    | 21 |  along with Website Baker; if not, write to the Free Software
 | 
  
    | 22 |  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 | 
  
    | 23 | 
 | 
  
    | 24 | */
 | 
  
    | 25 | 
 | 
  
    | 26 | require('../../config.php');
 | 
  
    | 27 | 
 | 
  
    | 28 | // delete remember key of current user from database
 | 
  
    | 29 | if (isset($_SESSION['USER_ID']) && isset($database)) {
 | 
  
    | 30 | 	$table = TABLE_PREFIX . 'users';
 | 
  
    | 31 | 	$sql = "UPDATE `$table` SET `remember_key` = '' WHERE `user_id` = '" . (int) $_SESSION['USER_ID'] . "'";
 | 
  
    | 32 | 	$database->query($sql);
 | 
  
    | 33 | }
 | 
  
    | 34 | 
 | 
  
    | 35 | // delete remember key cookie if set
 | 
  
    | 36 | if (isset($_COOKIE['REMEMBER_KEY'])) {
 | 
  
    | 37 | 	setcookie('REMEMBER_KEY', '', time() - 3600, '/');
 | 
  
    | 38 | }
 | 
  
    | 39 | 
 | 
  
    | 40 | // delete most critical session variables manually
 | 
  
    | 41 | $_SESSION['USER_ID'] = null;
 | 
  
    | 42 | $_SESSION['GROUP_ID'] = null;
 | 
  
    | 43 | $_SESSION['GROUPS_ID'] = null;
 | 
  
    | 44 | $_SESSION['USERNAME'] = null;
 | 
  
    | 45 | $_SESSION['PAGE_PERMISSIONS'] = null;
 | 
  
    | 46 | $_SESSION['SYSTEM_PERMISSIONS'] = null;
 | 
  
    | 47 | 
 | 
  
    | 48 | // overwrite session array
 | 
  
    | 49 | $_SESSION = array();
 | 
  
    | 50 | 
 | 
  
    | 51 | // delete session cookie if set
 | 
  
    | 52 | if (isset($_COOKIE[session_name()])) {
 | 
  
    | 53 |     setcookie(session_name(), '', time() - 42000, '/');
 | 
  
    | 54 | }
 | 
  
    | 55 | 
 | 
  
    | 56 | // delete the session itself
 | 
  
    | 57 | session_destroy();
 | 
  
    | 58 | 
 | 
  
    | 59 | // redirect to admin login
 | 
  
    | 60 | die(header('Location: ' . ADMIN_URL . '/login/index.php'));
 | 
  
    | 61 | 
 | 
  
    | 62 | ?>
 |