<?php
// /core/auth/logout.php
session_start();
// Unset all session variables
$_SESSION = [];
// Destroy the session cookie if it exists
if (ini_get("session.use_cookies")) {
$params = session_get_cookie_params();
setcookie(
session_name(),
'',
time() - 42000,
$params["path"],
$params["domain"],
$params["secure"],
$params["httponly"]
);
}
// Finally destroy the session
session_destroy();
// Redirect back to home (adjust if you want another page)
header("Location: /index.php");
exit;