Security

2026-09-11 22:20:29 +02:00
parent 38701bf06a
commit fc1a211c73
9 changed files with 478 additions and 12 deletions
@@ -6,13 +6,17 @@
 require_once __DIR__ . '/../includes/auth.php';
 start_secure_session();

-// Vernietig persistente login in database
+// Vernietig persistente login en sessie in database (SOC 2 CC6.1 / ISO 27001 A.9.4.2)
 if (!empty($_SESSION['user_id'])) {
+    $uid = (int)$_SESSION['user_id'];
    try {
        $db = get_db_connection();
        ensure_remember_token_columns($db);
        $stmt = $db->prepare("UPDATE users SET remember_token = NULL, remember_token_expires_at = NULL WHERE id = ?");
-        $stmt->execute([$_SESSION['user_id']]);
+        $stmt->execute([$uid]);
+
+        fociz_terminate_session(session_id());
+        fociz_log_audit($uid, 'SESSION_TERMINATED_LOGOUT', 'users', $uid, ['ip' => fociz_get_client_ip()], 'SUCCESS', $_SESSION['user_email'] ?? null);
    } catch (Throwable $e) {
        // Stil negeren bij uitloggen
    }