<?php
// /edenrms/auth/logout.php
if (session_status() !== PHP_SESSION_ACTIVE) session_start();

// wipe session + cookies
$_SESSION = [];
if (ini_get('session.use_cookies')) {
  $p = session_get_cookie_params();
  setcookie(session_name(), '', time() - 42000, $p['path'], $p['domain'], $p['secure'], $p['httponly']);
}
setcookie('eden_user','', time()-3600, '/', '', false, true);
session_destroy();

// back to login
header('Location: /edenrms/login.php');
exit;
