Implement session expiration enforcement: clear remember cookies and redirect to login on session expiry; update header script for daily re-login requirement.

2026-09-09 16:49:29 +02:00
parent 1487b680f1
commit 1b6c8e4afd
7 changed files with 71 additions and 76 deletions
@@ -70,7 +70,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
            $_SESSION['is_2fa_verified'] = true;
            $_SESSION['auth_date'] = date('Y-m-d');
            $_SESSION['session_expires_at'] = strtotime('today 23:59:59');
-            issue_remember_token($adminId);
+            clear_remember_cookie();
            unset($_SESSION['setup_totp_secret']);

            $success = true;