From: Mischa POSLAWSKY <perl@shiar.org>
Date: Tue, 11 Jul 2017 15:57:03 +0000 (+0200)
Subject: login: separate logout page
X-Git-Tag: v1.3~4
X-Git-Url: http://git.shiar.net/minimedit.git/commitdiff_plain/cfc77b27b98cdf180110d772f39c211b0d973002

login: separate logout page

Move login fallback to a distinct page to allow forced relogin.
---

diff --git a/login.php b/login.php
index 35dc55e..6781211 100644
--- a/login.php
+++ b/login.php
@@ -1,18 +1,11 @@
 <?php
 require 'auth.inc.php';
 
-if ($editable) {
-	http_response_code(307);
-	header('Location: /');
+if (!$editable) {
+	require 'logout.php';
 	exit;
 }
 
-header('WWW-Authenticate: Basic realm=""');
-http_response_code(401);
-
-// fallback page shown on authentication failure
-include 'head.inc.php';
-?>
-<h2>Inloggen mislukt</h2>
-<p>Geen geldige login voor sitebeheer.</p>
+http_response_code(307);
+header('Location: /');
 
diff --git a/logout.php b/logout.php
new file mode 100644
index 0000000..5b76572
--- /dev/null
+++ b/logout.php
@@ -0,0 +1,10 @@
+<?php
+header('WWW-Authenticate: Basic realm=""');
+http_response_code(401);
+
+// fallback page shown on authentication failure
+include 'head.inc.php';
+?>
+<h2>Niet ingelogd</h2>
+<p>Voor sitebeheer moet worden ingelogd met een gerechtigde gebruiker.</p>
+