[Noalyss-commit] [noalyss] 10/17: Security : clean cookie and global variables when logging out

[Dany De Bontridder]

sparkyx pushed a commit to branch master
in repository noalyss.

commit 19e6e8ca6d00dfd2e47dcadb891c1f0672cf95c4
Author: Dany De Bontridder <address@hidden>
Date:   Tue Sep 15 11:49:41 2015 +0200

    Security : clean cookie and global variables when logging out
---
 html/logout.php |   16 ++++++++++++++++
 1 files changed, 16 insertions(+), 0 deletions(-)

diff --git a/html/logout.php b/html/logout.php
index 64db90d..0b65167 100644
--- a/html/logout.php
+++ b/html/logout.php
@@ -27,6 +27,22 @@ require_once('lib/class_database.php');
 html_page_start("classic");
 
 session_unset();
+/* clean Global variable */
+
+if ( isset ($g_user) ) unset ($GLOBAL['g_user']);
+if ( isset ($g_pass) ) unset ($GLOBAL['g_pass']);
+//
+// Clean the possible cookies
+//
+if (isset($_SERVER['HTTP_COOKIE'])) {
+    $cookies = explode(';', $_SERVER['HTTP_COOKIE']);
+    foreach($cookies as $cookie) {
+        $parts = explode('=', $cookie);
+        $name = trim($parts[0]);
+        setcookie($name, '', time()-1000);
+        setcookie($name, '', time()-1000, '/');
+    }
+}
 echo '<h2 class="info">'._('Vous êtes déconnecté').'</h2>';
 echo '<META HTTP-EQUIV="REFRESH" content="0;url=index.html">';