Add Session::clear method

- Replace manual session clear by method in mod/manage

diff --git a/mod/manage.php b/mod/manage.php
index 09f553c61d395aea8c44dee57a9d0b841ba6545c..a1ca87e96321c03430847984b3094f36c91580c4 100644 (file)
--- a/mod/manage.php
+++ b/mod/manage.php
@@ -70,24 +70,8 @@ function manage_post(App $a) {
        if (!DBA::isResult($user)) {
                return;
        }
-       unset($_SESSION['authenticated']);
-       unset($_SESSION['uid']);
-       unset($_SESSION['visitor_id']);
-       unset($_SESSION['administrator']);
-       unset($_SESSION['cid']);
-       unset($_SESSION['theme']);
-       unset($_SESSION['mobile-theme']);
-       unset($_SESSION['page_flags']);
-       unset($_SESSION['return_path']);
-       if (!empty($_SESSION['submanage'])) {
-               unset($_SESSION['submanage']);
-       }
-       if (!empty($_SESSION['sysmsg'])) {
-               unset($_SESSION['sysmsg']);
-       }
-       if (!empty($_SESSION['sysmsg_info'])) {
-               unset($_SESSION['sysmsg_info']);
-       }
+
+       Session::clear();
 
        Session::setAuthenticatedForUser($a, $user, true, true);
 

diff --git a/src/Core/Session.php b/src/Core/Session.php
index b44ff3e2ea2fa928a69c4213b63c3339a20c4303..3a0da3ab0825ad6261703780ea92dd23e2720434 100644 (file)
--- a/src/Core/Session.php
+++ b/src/Core/Session.php
@@ -99,6 +99,14 @@ class Session
                unset($_SESSION[$name]);
        }
 
+       /**
+        * Clears the current session array
+        */
+       public static function clear()
+       {
+               $_SESSION = [];
+       }
+
        /**
         * @brief Sets the provided user's authenticated session
         *
@@ -107,6 +115,7 @@ class Session
         * @param bool  $login_initial
         * @param bool  $interactive
         * @param bool  $login_refresh
+        * @throws \Friendica\Network\HTTPException\ForbiddenException
         * @throws \Friendica\Network\HTTPException\InternalServerErrorException
         */
        public static function setAuthenticatedForUser(App $a, array $user_record, $login_initial = false, $interactive = false, $login_refresh = false)