? boost-305071.patch
? boost-640306.patch
? boost-tg.patch
? update_README.patch
? watchdog_boost.module.patch
? words2_boost.admin_.inc_.patch
? words_boost.module.patch
Index: boost.module
===================================================================
RCS file: /cvs/drupal-contrib/contributions/modules/boost/boost.module,v
retrieving revision 1.3.2.2.2.5.2.258
diff -u -p -r1.3.2.2.2.5.2.258 boost.module
--- boost.module	24 Nov 2009 05:32:55 -0000	1.3.2.2.2.5.2.258
+++ boost.module	25 Nov 2009 07:08:29 -0000
@@ -161,6 +161,13 @@ function boost_views_pre_render(&$view) 
  */
 function boost_init() {
   global $user, $base_path;
+
+  // remove cookie set at logout
+  $uid = $user ? $user->uid : 0;
+  if (isset($_COOKIE[BOOST_COOKIE]) && $uid == 0) {
+    boost_set_cookie(0, BOOST_TIME - 86400);
+  }
+
   // Disable all caches when nocache is set
   if (isset($_GET['nocache'])) {
     $GLOBALS['conf']['cache'] = CACHE_DISABLED;
@@ -807,7 +814,8 @@ function boost_user($op, &$edit, &$accou
       boost_set_cookie($user);
       break;
     case 'logout':
-      boost_set_cookie($user, BOOST_TIME - 86400);
+      // set the cookie to 0, then remove at the following request, this way browsers won't show a cached logged in page
+      boost_set_cookie(0);
       break;
     case 'delete':
       // Expire the relevant user page from the static page cache to prevent serving stale content:
@@ -2849,7 +2857,8 @@ function boost_set_cookie($user, $expire
   if (!$expires) {
     $expires = ini_get('session.cookie_lifetime');
     $expires = (!empty($expires) && is_numeric($expires)) ? BOOST_TIME + (int)$expires : 0;
-    setcookie(BOOST_COOKIE, $user->uid, $expires, ini_get('session.cookie_path'), ini_get('session.cookie_domain'), ini_get('session.cookie_secure') == '1');
+    $uid = $user ? $user->uid : 0;
+    setcookie(BOOST_COOKIE, $uid, $expires, ini_get('session.cookie_path'), ini_get('session.cookie_domain'), ini_get('session.cookie_secure') == '1');
   }
   else {
     setcookie(BOOST_COOKIE, FALSE, $expires, ini_get('session.cookie_path'), ini_get('session.cookie_domain'), ini_get('session.cookie_secure') == '1');