X-Git-Url: http://git.plutz.net/?a=blobdiff_plain;f=users.sh;h=4c730ee3753367567f6e08e527df6bd9da4f85a0;hb=46cfaab0ad63961e6d918ae5df596814fb344b4e;hp=1959e9de4b757084fad3d850b1b7b771517cb3c3;hpb=00aa1675c49f23eb075d1fc7ceb69bac5e1ba83c;p=serve0

diff --git a/users.sh b/users.sh
index 1959e9d..4c730ee 100755
--- a/users.sh
+++ b/users.sh
@@ -226,8 +226,8 @@ user_logout(){
   # destroy cookie, destroy session
   # keep device cookie
   new_session
-  SET_COOKIE 0 session=""
-  SET_COOKIE 0 user_id=""
+  SESSION_COOKIE new
+  SET_COOKIE 0 user_id="" Path="/${_BASE#/}" SameSite=Strict HttpOnly
   REDIRECT "${_BASE}${PATH_INFO}#USER_LOGGED_OUT"
 }
 
@@ -338,7 +338,7 @@ w_user_login(){
   elif [ "$USER_ID" ]; then
     cat <<-EOF
 	[form #user_login .logout method=POST
-	  [p You are currently logged in as "${USER_NAME}"]
+	  [p Logged in as [span . $(HTML ${USER_NAME})]]
 	  [submit "action" "user_logout" Logout]
 	]
 	EOF