web - refactor core modules, harden authorization, simplify endpoints

web/intranet_repo/projects/authorization/logout.php

@@ -1,13 +1,22 @@
-<?php	/*	Name:			loginout.php
-			Beschreibung:	Logout-Seite	*/
+<?php
+require_once $_SERVER['DOCUMENT_ROOT'] . '/intranet_repo/general_files/ini/parameters.php';
+require_once __DIR__ . '/util/authorization_helpers.php';
 
-	if (session_status() == PHP_SESSION_NONE) {
-		session_start();
-	}
-	require_once $_SERVER['DOCUMENT_ROOT'].'/intranet_repo/general_files/ini/parameters.php';
-	require_once $_SERVER['DOCUMENT_ROOT'].'/intranet_repo/general_files/ini/functions.php';
+authorization_start_session();
+authorization_send_security_headers();
 
+$_SESSION = [];
+if (ini_get('session.use_cookies')) {
+    $params = session_get_cookie_params();
+    setcookie(session_name(), '', [
+        'expires' => time() - 42000,
+        'path' => $params['path'],
+        'domain' => $params['domain'],
+        'secure' => $params['secure'],
+        'httponly' => $params['httponly'],
+        'samesite' => $params['samesite'] ?? 'Lax',
+    ]);
+}
 session_destroy();
 
-header("Location: {$g_httpLoginPath}");
-exit();
+authorization_redirect($g_httpLoginPath, 302);