Hi everyone.

Cake: 1.2.0.6311 beta, Mysql 5, PHP 5, Sessions: Database, Security:
High

I wonder if anyone has come across this problem I am having with Cake
1.2 Beta.

I have setup the Auth component and have a username and password
working correctly.  If I try to access a controller that is private,
then it makes sure the user is logged in before allowing access.

The problem I am having is after the user logs out, and the browser is
still open, if you then type a url that points to a private
controller, then the access is allowed.  But if the browser is closed
after the user logs out, and then reopen the browser and navigate to a
private url, then the login window appears nicely.

I assume the Auth component's logout functionality is not clearing out
the session correctly.

I have a user controller and my table is called users, with the
default field names.

I have tried my logout function in the users controller 3 different
ways, all with the same results.
1.
        function logout() {
        }

2.
        function logout() {
                $this->Session->setFlash('You have been logged out. ');
                $this->redirect('/');
                exit;
        }

3.
        function logout() {
        $this->Session->destroy('user');
                $this->Session->setFlash('You have been logged out. ');
                $this->redirect('/');
                exit;
        }

Any help is greatly appreciated.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to