Hi everyone. Cake: 1.2.0.6311 beta, Mysql 5, PHP 5, Sessions: Database, Security: High
I wonder if anyone has come across this problem I am having with Cake 1.2 Beta. I have setup the Auth component and have a username and password working correctly. If I try to access a controller that is private, then it makes sure the user is logged in before allowing access. The problem I am having is after the user logs out, and the browser is still open, if you then type a url that points to a private controller, then the access is allowed. But if the browser is closed after the user logs out, and then reopen the browser and navigate to a private url, then the login window appears nicely. I assume the Auth component's logout functionality is not clearing out the session correctly. I have a user controller and my table is called users, with the default field names. I have tried my logout function in the users controller 3 different ways, all with the same results. 1. function logout() { } 2. function logout() { $this->Session->setFlash('You have been logged out. '); $this->redirect('/'); exit; } 3. function logout() { $this->Session->destroy('user'); $this->Session->setFlash('You have been logged out. '); $this->redirect('/'); exit; } Any help is greatly appreciated. --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---