From 73ea0c4b1ef02af6f243374cc04a1cee26189c11 Mon Sep 17 00:00:00 2001 From: onli Date: Wed, 27 Apr 2016 18:12:48 +0000 Subject: [PATCH] Restore session id change on logout (#399) --- include/functions_config.inc.php | 1 + 1 file changed, 1 insertion(+) diff --git a/include/functions_config.inc.php b/include/functions_config.inc.php index 06906d015..ced5cb482 100644 --- a/include/functions_config.inc.php +++ b/include/functions_config.inc.php @@ -388,6 +388,7 @@ function serendipity_session_destroy() { $no_smarty = $_SESSION['no_smarty']; @session_destroy(); session_start(); + session_regenerate_id(); $_SESSION['SERVER_GENERATED_SID'] = true; $_SESSION['no_smarty'] = $no_smarty;