nexxo 2b2bb439a5 Stop the console logout from destroying a shared portal session ... Where the console and the portal share a host (shared/fallback mode — this VM's own mode), both guards keep their login key in the SAME session. session()->invalidate() is flush() + migrate(true) — it discards every attribute in the session, not only the operator's, so signing out of the console silently signed a customer out of the portal too if the same browser carried both. Replaced with session()->regenerate(): a new session id, so there is no fixation risk, while attributes belonging to any other guard survive untouched.		2026-07-28 13:58:42 +02:00
..
admin-guest.php	Give the console a front door of its own	2026-07-28 11:45:22 +02:00
admin.php	Stop the console logout from destroying a shared portal session	2026-07-28 13:58:42 +02:00
channels.php	Authorize the console's live feed on the operator guard, not the default	2026-07-28 13:31:50 +02:00
console.php	Move the console off /admin, give the status page its own address, and measure monitoring	2026-07-27 06:05:40 +02:00
web.php	Let the owner make two-factor compulsory, without locking themselves out	2026-07-28 12:08:08 +02:00