08-24-2017, 10:45 PM
I can give you some code to test off the top of your head that shouldn't break anything. Go into your users table and add a column called session (varchar 255).
Go to usersc/scripts/just_after_login.php and put this...
Then in usersc/includes/head_tags.php put
Give that a whirl and see what happens.
Go to usersc/scripts/just_after_login.php and put this...
Code:
$session = Token::generate();
Code:
session_id($session);
Code:
$db->update('users',$user->data()->id,['session'=>$session]);
Then in usersc/includes/head_tags.php put
Code:
if($users->data()->session != $_SESSION['token']){
Code:
Redirect::to('http://mydomain.com/users/logout.php');
Code:
}
Give that a whirl and see what happens.