Implement session expiration enforcement: clear remember cookies and redirect to login on session expiry; update header script for daily re-login requirement.

2026-09-09 16:49:29 +02:00
parent 1487b680f1
commit 1b6c8e4afd
7 changed files with 71 additions and 76 deletions
@@ -29,7 +29,7 @@ if (empty($_SESSION['user_id']) && $stateUserId) {
            $_SESSION['is_2fa_verified'] = true;
            $_SESSION['auth_date'] = date('Y-m-d');
            $_SESSION['session_expires_at'] = strtotime('today 23:59:59');
-            issue_remember_token((int)$recoveredUser['id']);
+            clear_remember_cookie();
        }
    } catch (Throwable $e) {
        // Foutafhandeling