fixed csrf token check for a few pages where it mightve been broken session manager now can be bound to base user class and used, like in login logout now pushes you to login regardless, no longer has param to push to custom url fixed validate client, hijacking sessions no longer works
8 lines
145 B
PHP
8 lines
145 B
PHP
<?php
|
|
$defflip = (!cfip()) ? exit(header('HTTP/1.1 401 Unauthorized')) : 1;
|
|
|
|
$user->logoutUser();
|
|
|
|
$smarty->assign("CONTENT", "default.tpl");
|
|
?>
|