api/login: add session_destroy

diff --git a/classes/api.php b/classes/api.php
index cf8b2dcfca93d95dffe395c9d2162b0f380a737f..2b9c3a148c8620be561c5bd304571977799742c9 100644 (file)
--- a/classes/api.php
+++ b/classes/api.php
@@ -47,6 +47,7 @@ class API extends Handler {
        }
 
        function login() {
+               @session_destroy();
                @session_start();
 
                $login = db_escape_string($this->link, $_REQUEST["user"]);