prevent redirect loop if an account is manually removed while logged in

diff --git a/include/auth.php b/include/auth.php
index ccaa970de1e5bcb2272892c5a1b38dd98f1cd197..5d7ac436b1771b5cb4ee50f6b4638e09a5f06a4b 100644 (file)
--- a/include/auth.php
+++ b/include/auth.php
@@ -28,6 +28,8 @@ if((isset($_SESSION)) && (x($_SESSION,'authenticated')) && ((! (x($_POST,'auth-p
                );
 
                if(! count($r)) {
+                       unset($_SESSION['authenticated']);
+                       unset($_SESSION['uid']);
                        goaway($a->get_baseurl());
                }