From bda731992162b988808246e191a29868db4877f4 Mon Sep 17 00:00:00 2001
From: Flatlogic Bot <support@flatlogic.com>
Date: Sun, 4 Jan 2026 09:27:30 +0000
Subject: [PATCH] Edit auth.php via Editor

---
 auth.php | 28 ++++++++++++++++++++++------
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/auth.php b/auth.php
index 457ed9e..9f6dca5 100644
--- a/auth.php
+++ b/auth.php
@@ -1,11 +1,11 @@
 <?php
-// Start session if not already started
-if (session_status() === PHP_SESSION_NONE) {
-    session_start();
-}
+require_once __DIR__ . '/session_config.php';
 
 function check_auth() {
-    if (!isset($_SESSION['role']) || !isset($_SESSION['user_id'])) {
+    // Check if user is logged in
+    if (!isset($_SESSION['logged_in']) || !$_SESSION['logged_in'] || !isset($_SESSION['role']) || !isset($_SESSION['user_id'])) {
+        // Store the current page to redirect after login
+        $_SESSION['redirect_after_login'] = $_SERVER['REQUEST_URI'];
         header('Location: login.php');
         exit();
     }
@@ -25,5 +25,21 @@ function get_user_name() {
 }
 
 function is_logged_in() {
-    return isset($_SESSION['role']) && isset($_SESSION['user_id']);
+    return isset($_SESSION['logged_in']) && $_SESSION['logged_in'] === true;
+}
+
+function logout() {
+    $_SESSION = array();
+    
+    if (ini_get("session.use_cookies")) {
+        $params = session_get_cookie_params();
+        setcookie(session_name(), '', time() - 42000,
+            $params["path"], $params["domain"],
+            $params["secure"], $params["httponly"]
+        );
+    }
+    
+    session_destroy();
+    header('Location: login.php');
+    exit();
 }
\ No newline at end of file