Implement session expiration enforcement: clear remember cookies and redirect to login on session expiry; update header script for daily re-login requirement.

2026-09-09 16:49:29 +02:00
parent 1487b680f1
commit 1b6c8e4afd
7 changed files with 71 additions and 76 deletions
@@ -108,8 +108,8 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
                $_SESSION['auth_date'] = date('Y-m-d');
                $_SESSION['session_expires_at'] = strtotime('today 23:59:59');

-                // Activeer dagspecifieke remember token (verloopt vannacht om 23:59:59)
-                issue_remember_token((int)$user['id']);
+                // Zorg dat er geen persistente remember cookies worden gebruikt
+                clear_remember_cookie();

                unset($_SESSION['pending_2fa_user_id'], $_SESSION['pending_2fa_user_email'], $_SESSION['pending_2fa_user_name']);