Generate new session id on logout()

2025-12-27 07:31:09 +01:00 · 2025-03-26 04:01:09 -07:00
parent 484b89718a
commit 47d7c121de
1 changed files with 1 additions and 0 deletions
--- a/src/RaspAP/Auth/HTTPAuth.php
+++ b/src/RaspAP/Auth/HTTPAuth.php
@@ -79,6 +79,7 @@ class HTTPAuth
     */
    public function logout(): void
    {
+        session_regenerate_id(true); // generate a new session id
        session_unset(); // unset all session variables
        session_destroy(); // destroy the session
        $redirectUrl = $_SERVER['REQUEST_URI'];