some http auth fixes

[tt-rss.git] / logout.php
diff --git a/logout.php b/logout.php

index 7757689dcccebe9d7acdad692e4d2372c1f00b8c..9af2bab61beb0b3a9e664191450a7040badbbf3f 100644 (file)
--- a/logout.php
+++ b/logout.php
@@ -8,7 +8,25 @@
  
         if (!USE_HTTP_AUTH) {
                 header("Location: login.php");
-       } else {
-               header("Location: tt-rss.php");
-       }
-?>
+       } else { ?>
+       
+       <html>
+               <head>
+                       <title>Tiny Tiny RSS : Logout</title>
+                       <link rel="stylesheet" type="text/css" href="tt-rss.css">
+       <body class="logoutBody">
+               <div class="logoutContent">     
+               
+                       <h1>You have been logged out.</h1>
+
+                       <p><span class="logoutWarning">Warning:</span>
+                       As there is no way to reliably clear HTTP Authentication 
+                       credentials from your browser, it is recommended for you to close
+                       this browser window, otherwise your browser could automatically
+                       authenticate again using previously supplied credentials, which
+                       is a security risk.</p>
+                       
+               </div>
+       </body>
+       </html>
+<?     } ?>