From f138eeef1d105570fb118278310d370492c938c8 Mon Sep 17 00:00:00 2001 From: r888888888 Date: Mon, 11 Jul 2016 16:38:00 -0700 Subject: [PATCH] fixes #2619: Delete password_hash cookie on sign out --- app/controllers/sessions_controller.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/controllers/sessions_controller.rb b/app/controllers/sessions_controller.rb index b824800d0..b6fa66da2 100644 --- a/app/controllers/sessions_controller.rb +++ b/app/controllers/sessions_controller.rb @@ -16,8 +16,8 @@ class SessionsController < ApplicationController def destroy session.delete(:user_id) - cookies.delete(:cookie_password_hash) cookies.delete(:user_name) + cookies.delete(:password_hash) redirect_to(posts_path, :notice => "You are now logged out.") end