Squashed 'cgilite/' changes from 6bfa64b..9451cdd

9451cdd min-height for textarea
84a16dd unambiguous cookie path when destroying user session

git-subtree-dir: cgilite
git-subtree-split: 9451cddb9f3422c050b7c4d3c01d10a177f3e36b

diff --git a/common.css b/common.css
index f9b17ad8dc34dd3730429452ef05cc5bccfd883d..d6a931604d58c17c0fb0124a739a194f8d61de27 100644 (file)
--- a/common.css
+++ b/common.css
@@ -68,6 +68,7 @@ select, input, button, textarea, a.button {
   border-radius: 2pt;
 }
 select { padding: .375em 0; }
+textarea { min-height: 7em; }
 
 input[type=radio], input[type=checkbox] {
   vertical-align: baseline;

diff --git a/users.sh b/users.sh
index 1959e9de4b757084fad3d850b1b7b771517cb3c3..b784ec75983f4163702722d8a2557e25c04ac2d7 100755 (executable)
--- a/users.sh
+++ b/users.sh
@@ -226,8 +226,8 @@ user_logout(){
   # destroy cookie, destroy session
   # keep device cookie
   new_session
-  SET_COOKIE 0 session=""
-  SET_COOKIE 0 user_id=""
+  SESSION_COOKIE new
+  SET_COOKIE 0 user_id="" Path="/${_BASE#/}" SameSite=Strict HttpOnly
   REDIRECT "${_BASE}${PATH_INFO}#USER_LOGGED_OUT"
 }