logout: clear user var to prevent disallowed edit option

diff --git a/logout.php b/logout.php
index 5b76572c40c5b4b25c199ce0778351fb8f68f8aa..112bb9b0b053dd93706a234789547c93f8487722 100644 (file)
--- a/logout.php
+++ b/logout.php
@@ -4,6 +4,7 @@ http_response_code(401);
 
 // fallback page shown on authentication failure
 include 'head.inc.php';
+$Admin = $User = FALSE; // ignore old user headers
 ?>
 <h2>Niet ingelogd</h2>
 <p>Voor sitebeheer moet worden ingelogd met een gerechtigde gebruiker.</p>