From 0d7c0235650d8ae0dbec511b43a87e09b5398b7c Mon Sep 17 00:00:00 2001 From: "Namhyeon, Go" Date: Tue, 13 Feb 2018 15:57:03 +0900 Subject: [PATCH] Update security.php --- system/security.php | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) diff --git a/system/security.php b/system/security.php index 74c5fd6..1554f96 100644 --- a/system/security.php +++ b/system/security.php @@ -262,13 +262,18 @@ if(!function_exists("session_logout")) { set_session("ss_key", ""); } + // delete session file @unlink($config['session_dir'] . '/' . protect_dir_path($ss_key)); - // 토큰이 지워졌는지 화인 + // permanently destory + session_unset(); + session_destroy(); + + // check ereased token $abuse = check_token_abuse($ss_user_name, get_session("ss_user_name")); $abuse = ($abuse && check_token_abuse($ss_key, get_session("ss_key"))); - // 판단 결과를 반영 + // apply result $flag = $abuse; return $flag;