X-Git-Url: http://git.plutz.net/?a=blobdiff_plain;f=users.sh;h=b784ec75983f4163702722d8a2557e25c04ac2d7;hb=9451cddb9f3422c050b7c4d3c01d10a177f3e36b;hp=1959e9de4b757084fad3d850b1b7b771517cb3c3;hpb=6bfa64b084ea028f9078f679a4a77ffc57e02361;p=cgilite

diff --git a/users.sh b/users.sh
index 1959e9d..b784ec7 100755
--- a/users.sh
+++ b/users.sh
@@ -226,8 +226,8 @@ user_logout(){
   # destroy cookie, destroy session
   # keep device cookie
   new_session
-  SET_COOKIE 0 session=""
-  SET_COOKIE 0 user_id=""
+  SESSION_COOKIE new
+  SET_COOKIE 0 user_id="" Path="/${_BASE#/}" SameSite=Strict HttpOnly
   REDIRECT "${_BASE}${PATH_INFO}#USER_LOGGED_OUT"
 }