From cfc77b27b98cdf180110d772f39c211b0d973002 Mon Sep 17 00:00:00 2001
From: Mischa POSLAWSKY <perl@shiar.org>
Date: Tue, 11 Jul 2017 17:57:03 +0200
Subject: [PATCH] login: separate logout page

Move login fallback to a distinct page to allow forced relogin.
---
 login.php  | 15 ++++-----------
 logout.php | 10 ++++++++++
 2 files changed, 14 insertions(+), 11 deletions(-)
 create mode 100644 logout.php

diff --git a/login.php b/login.php
index 35dc55e..6781211 100644
--- a/login.php
+++ b/login.php
@@ -1,18 +1,11 @@
 <?php
 require 'auth.inc.php';
 
-if ($editable) {
-	http_response_code(307);
-	header('Location: /');
+if (!$editable) {
+	require 'logout.php';
 	exit;
 }
 
-header('WWW-Authenticate: Basic realm=""');
-http_response_code(401);
-
-// fallback page shown on authentication failure
-include 'head.inc.php';
-?>
-<h2>Inloggen mislukt</h2>
-<p>Geen geldige login voor sitebeheer.</p>
+http_response_code(307);
+header('Location: /');
 
diff --git a/logout.php b/logout.php
new file mode 100644
index 0000000..5b76572
--- /dev/null
+++ b/logout.php
@@ -0,0 +1,10 @@
+<?php
+header('WWW-Authenticate: Basic realm=""');
+http_response_code(401);
+
+// fallback page shown on authentication failure
+include 'head.inc.php';
+?>
+<h2>Niet ingelogd</h2>
+<p>Voor sitebeheer moet worden ingelogd met een gerechtigde gebruiker.</p>
+
-- 
2.30.0