egroupware/logout.php

<?php
/**
 * eGroupWare - Logout
 *
 * @link http://www.egroupware.org
 * @author Joseph Engo <jengo@phpgroupware.org>
 * @license http://opensource.org/licenses/lgpl-license.php LGPL - GNU Lesser General Public License
 * @package api
 * @subpackage authentication
 * @version $Id$
 */

$GLOBALS['egw_info'] = array(
	'flags' => array(
		'disable_Template_class' => True,
		'currentapp'             => 'logout',
		'noheader'               => True,
		'nofooter'               => True,
		'nonavbar'               => True
	)
);
include('./header.inc.php');

$GLOBALS['sessionid'] = egw_session::get_sessionid();
$GLOBALS['kp3']       = egw_session::get_request('kp3');

$verified = $GLOBALS['egw']->session->verify();

if(!($redirectTarget = $GLOBALS['egw']->session->appsession('referer', 'login')))
{
	$redirectTarget = $GLOBALS['egw_info']['server']['webserver_url'].'/login.php?cd=1&domain='.$GLOBALS['egw_info']['user']['domain'];
}
elseif(strpos($redirectTarget, '[?&]cd=') !== false)
{
	$redirectTarget = preg_replace('/([?&])cd=[^&]+/', '$1cd=1', $redirectTarget);
}

if($verified)
{
	$GLOBALS['egw']->hooks->process('logout');
	$GLOBALS['egw']->session->destroy($GLOBALS['sessionid'],$GLOBALS['kp3']);
}

$GLOBALS['egw']->session->egw_setcookie('eGW_remember','',0,'/');
$GLOBALS['egw']->session->egw_setcookie('sessionid');
$GLOBALS['egw']->session->egw_setcookie('kp3');
$GLOBALS['egw']->session->egw_setcookie('domain');

if($GLOBALS['egw_info']['server']['auth_type'] == 'cas')
{
	require_once('CAS/CAS.php');

	phpCAS::client(CAS_VERSION_2_0,
								$GLOBALS['egw_info']['server']['cas_server_host_name'],
								(int) $GLOBALS['egw_info']['server']['cas_server_port'],
								$GLOBALS['egw_info']['server']['cas_server_uri'] );
	phpCAS::logout(array('url'=>$GLOBALS['egw_info']['server']['webserver_url'].'/login.php?cd=1&domain='.$GLOBALS['egw_info']['user']['domain']));
}

// $GLOBALS['egw']->redirect($redirectTarget);
?>
<head>
<script language="javascript">
function clearAuthenticationCache(page)
{
	// Default to a non-existing page (give error 500).
	// An empty page is better, here.
	if (!page) page = '.force_logout';

	try
	{
		var agt=navigator.userAgent.toLowerCase();
		if (agt.indexOf("msie") != -1)
		{
			// IE clear HTTP Authentication
			document.execCommand("ClearAuthenticationCache");
		}
		else
		{
			var xmlhttp;
			if (window.XMLHttpRequest)
			{
				xmlhttp = new XMLHttpRequest();
			}
			else if (window.ActiveXObject)
			{
				xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");
			}
			else
			{
				return;
			}

			// Let's prepare invalid credentials
			xmlhttp.open("GET", page, true, "logout", "logout");
			// Let's send the request to the server
			xmlhttp.send("");
			// Let's abort the request
			xmlhttp.abort();
		}
	}
	catch(e)
	{
		alert("An exception occurred in the script. Error name: " + e.name + ". Error message: " + e.message);
		// There was an error
		return;
	}
}
</script>
<meta http-equiv="refresh" content="1;url=<?php echo $redirectTarget ?>">
</head>
<body onload="clearAuthenticationCache()">
<a href="<?php echo $redirectTarget ?>">Logout in progress...</a>
</body>
Initial revision 2000-08-18 05:24:22 +02:00			`<?php`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`/**`
			`* eGroupWare - Logout`
			`*`
			`* @link http://www.egroupware.org`
			`* @author Joseph Engo <jengo@phpgroupware.org>`
			`* @license http://opensource.org/licenses/lgpl-license.php LGPL - GNU Lesser General Public License`
			`* @package api`
			`* @subpackage authentication`
			`* @version $Id$`
			`*/`
Clean up some of the code 2001-03-31 13:43:14 +02:00
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`$GLOBALS['egw_info'] = array(`
			`'flags' => array(`
			`'disable_Template_class' => True,`
			`'currentapp' => 'logout',`
			`'noheader' => True,`
			`'nofooter' => True,`
			`'nonavbar' => True`
			`)`
			`);`
			`include('./header.inc.php');`
Clean up some of the code 2001-03-31 13:43:14 +02:00
changing the call of get_sessionid to retrieve the egw_session not only the basic_auth session, this fixes the problem, that sessions where not destroyed at logout 2009-10-02 10:33:13 +02:00			`$GLOBALS['sessionid'] = egw_session::get_sessionid();`
fixing a few more PHP5.3 problems, caused by PHP5.3 behavior to NOT register cookies in $_REQUEST any more by default (there's now a php.ini variable 'request_order' to controll that, but we want to work with a default configuraltion): - session restore was not working, as only $_REQUEST[sessionid] was checked - multi domain installs not working, as domain cookie was not checked - encrypted session were not working, because kp3 cookie was not checked --> there's now a static method egw_session::get_request($name), which checks $_REQUEST[$name], $_COOKIE[$name] and for that Safari bug also $_COOKIE[ucfirst($name)] 2009-08-22 21:32:28 +02:00			`$GLOBALS['kp3'] = egw_session::get_request('kp3');`
Clean up some of the code 2001-03-31 13:43:14 +02:00
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`$verified = $GLOBALS['egw']->session->verify();`
Semi-major adjustement with the goal of removing the register_globals requirement; Silence possible error if line# is not sent to errorlog class (often); This was tested with the setting on again and seems to work 2001-08-21 20:34:56 +02:00
replace previous logout code with cd=1 "You have been successfully logged out" 2015-07-17 08:29:22 +02:00			`if(!($redirectTarget = $GLOBALS['egw']->session->appsession('referer', 'login')))`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`{`
			`$redirectTarget = $GLOBALS['egw_info']['server']['webserver_url'].'/login.php?cd=1&domain='.$GLOBALS['egw_info']['user']['domain'];`
			`}`
replace previous logout code with cd=1 "You have been successfully logged out" 2015-07-17 08:29:22 +02:00			`elseif(strpos($redirectTarget, '[?&]cd=') !== false)`
			`{`
			`$redirectTarget = preg_replace('/([?&])cd=[^&]+/', '$1cd=1', $redirectTarget);`
			`}`
remember the login referer. That allows us to redirect to this page, after login the user out. 2006-08-23 15:50:02 +02:00
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`if($verified)`
			`{`
			`$GLOBALS['egw']->hooks->process('logout');`
			`$GLOBALS['egw']->session->destroy($GLOBALS['sessionid'],$GLOBALS['kp3']);`
			`}`
fixed fatal error "class errorlog not found" 2014-07-12 12:11:53 +02:00
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`$GLOBALS['egw']->session->egw_setcookie('eGW_remember','',0,'/');`
			`$GLOBALS['egw']->session->egw_setcookie('sessionid');`
			`$GLOBALS['egw']->session->egw_setcookie('kp3');`
			`$GLOBALS['egw']->session->egw_setcookie('domain');`
remember the login referer. That allows us to redirect to this page, after login the user out. 2006-08-23 15:50:02 +02:00
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`if($GLOBALS['egw_info']['server']['auth_type'] == 'cas')`
			`{`
			`require_once('CAS/CAS.php');`
phpgw_setcookie --> egw_setcookie and removing old code - I have no idea what is was supposed to do 2006-09-27 09:10:43 +02:00
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`phpCAS::client(CAS_VERSION_2_0,`
			`$GLOBALS['egw_info']['server']['cas_server_host_name'],`
			`(int) $GLOBALS['egw_info']['server']['cas_server_port'],`
			`$GLOBALS['egw_info']['server']['cas_server_uri'] );`
* API: fixed a reported deprecated warning on logout when using CAS 2011-12-09 11:55:40 +01:00			`phpCAS::logout(array('url'=>$GLOBALS['egw_info']['server']['webserver_url'].'/login.php?cd=1&domain='.$GLOBALS['egw_info']['user']['domain']));`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`}`

			`// $GLOBALS['egw']->redirect($redirectTarget);`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`?>`
			`<head>`
			`<script language="javascript">`
			`function clearAuthenticationCache(page)`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`{`
			`// Default to a non-existing page (give error 500).`
			`// An empty page is better, here.`
			`if (!page) page = '.force_logout';`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00
			`try`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`{`
			`var agt=navigator.userAgent.toLowerCase();`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`if (agt.indexOf("msie") != -1)`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`{`
			`// IE clear HTTP Authentication`
			`document.execCommand("ClearAuthenticationCache");`
			`}`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`else`
			`{`
			`var xmlhttp;`
			`if (window.XMLHttpRequest)`
			`{`
			`xmlhttp = new XMLHttpRequest();`
			`}`
			`else if (window.ActiveXObject)`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`{`
			`xmlhttp = new ActiveXObject("Microsoft.XMLHTTP");`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`}`
			`else`
			`{`
			`return;`
			`}`

CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`// Let's prepare invalid credentials`
			`xmlhttp.open("GET", page, true, "logout", "logout");`
			`// Let's send the request to the server`
			`xmlhttp.send("");`
			`// Let's abort the request`
			`xmlhttp.abort();`
			`}`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`}`
			`catch(e)`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`{`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`alert("An exception occurred in the script. Error name: " + e.name + ". Error message: " + e.message);`
CAS (Central Authentication Service) login for eGroupware 2008-11-15 11:54:39 +01:00			`// There was an error`
			`return;`
			`}`
reworked etemplate to have static methods and use the new features of egw_db- & html-class 2008-03-09 15:37:57 +01:00			`}`
			`</script>`
			`<meta http-equiv="refresh" content="1;url=<?php echo $redirectTarget ?>">`
			`</head>`
			`<body onload="clearAuthenticationCache()">`
			`<a href="<?php echo $redirectTarget ?>">Logout in progress...</a>`
			`</body>`