(mvc) trash session userdata on timeout

This commit is contained in:
Ad Schellevis 2015-06-23 09:33:07 +02:00
parent 9e1890af4a
commit d0fcd23536

View File

@ -77,6 +77,9 @@ class ControllerRoot extends Controller
&& $this->session->get("last_access") < (time() - 14400)) {
// session expired (todo, use config timeout)
$this->getLogger()->error("session expired");
// cleanup session data
$this->session->remove("Username");
$this->session->remove("last_access");
$this->response->redirect("/", true);
return false;
}