* clearing saved user auth key on logout

1 files changed, 22 insertions, 0 deletions

diff --git a/app/frontend/user/AuthManager.php b/app/frontend/user/AuthManager.php
new file mode 100644
index 0000000..54f92e4
--- /dev/null
+++ b/app/frontend/user/AuthManager.php
@@ -0,0 +1,22 @@
+<?php
+
+Prado::using('System.Security.TAuthManager');
+
+Prado::using('Application.facades.UserFacade');
+
+class AuthManager extends TAuthManager {
+
+    public function logout() {
+        $cookie = $this->Application->Request->Cookies[$this->UserKey];
+        if ($cookie) {
+            $user = $this->UserManager->getUserFromCookie($cookie);
+            if ($user && $user->Name === $this->Application->User->Name) {
+                UserFacade::getInstance()->clearUserAuthKey($user);
+            }
+        }
+        parent::logout();
+    }
+
+}
+
+?>