Destroy session when invalid, use more compatible js path

This commit is contained in:
andryyy committed 2017-05-14 21:54:18 +02:00
1 parent e795898b80
commit d06e938d0e
2 files changed
+7 -3

No files matched your search

+5 -1
View File
@@ -54,5 +54,9 @@ function session_check() {
return true;
}
if (isset($_SESSION['mailcow_cc_role']) && session_check() === false) {
exit("Invalid session");
session_regenerate_id(true);
session_unset();
session_destroy();
session_write_close();
header("Location: /");
}