Require the session ID to log somebody out - if it isn't given we just

[rails.git] / app / views / user / logout.html.erb

diff --git a/app/views/user/logout.html.erb b/app/views/user/logout.html.erb
new file mode 100644 (file)
index 0000000..e6d0dec
--- /dev/null
+++ b/app/views/user/logout.html.erb
@@ -0,0 +1,6 @@
+<h1><%= t 'user.logout.heading' %></h1>
+<% form_tag :action => "logout" do %>
+  <%= hidden_field_tag("referer", h(params[:referer])) %>
+  <%= hidden_field_tag("session", request.session_options[:id]) %>
+  <%= submit_tag t('user.logout.logout_button') %>
+<% end %>