Unpersist the session on logout

[lhc/web/wiklou.git] / includes / user / User.php

diff --git a/includes/user/User.php b/includes/user/User.php
index c92c06b..1f9e882 100644 (file)
--- a/includes/user/User.php
+++ b/includes/user/User.php
@@ -3721,6 +3721,7 @@ class User implements IDBAccessObject {
                } else {
                        $this->clearInstanceCache( 'defaults' );
                        $delay = $session->delaySave();
+                       $session->unpersist(); // Clear cookies (T127436)
                        $session->setLoggedOutTimestamp( time() );
                        $session->setUser( new User );
                        $session->set( 'wsUserID', 0 ); // Other code expects this