Pro PHP and jQuery by Jason Lengstorf.pdf - Computer Science ...

220
CHAPTER 6 ■ PASSWORD PROTECTION SENSITIVE ACTIONS AND AREAS
Creating a Method to Process the Logout
To process the logout, a new public method called processLogout() needs to be added to the Admin class.
This method does a quick check to make sure the proper action, user_logout, was supplied, and then
uses session_destroy() to remove the user data array by destroying the current session entirely.
You add this method to the Admin class by inserting the following bold code:
private $_saltLength = 7;
public function __construct($db=NULL, $saltLength=NULL) {...}
public function processLoginForm() {...}
/**
* Logs out the user
*
* @return mixed TRUE on success or messsage on failure
*/
public function processLogout()
{
/*
* Fails if the proper action was not submitted
*/
if ( $_POST['action']!='user_logout' )
{
return "Invalid action supplied for processLogout.";
}
}
/*
* Removes the user array from the current session
*/
session_destroy();
return TRUE;
private function _getSaltedHash($string, $salt=NULL) {...}