deinitialize session in login_sequence() instead of sessions.php

diff --git a/include/functions.php b/include/functions.php
index c05ee0a496bcacc47fbfe5d5005f1a0fa143d334..05f184eafe80d294e122be82d4754286a4ff781e 100644 (file)
--- a/include/functions.php
+++ b/include/functions.php
@@ -754,6 +754,11 @@
 
                                if (!$_SESSION["uid"]) render_login_form($link);
 
+                               @session_destroy();
+                               setcookie(session_name(), '', time()-42000, '/');
+
+                               exit;
+
                        } else {
                                /* bump login timestamp */
                                db_query($link, "UPDATE ttrss_users SET last_login = NOW() WHERE id = " .