<?php

// user log-out
	usleep(500000);

	// set database name
	$database = DB_PREFIX . 'system';
		
	
	
	// process request
	if ($sid != '')
	{
		// open db connection
		require "includes/db.php";
		
		
		// validate session	/ die if necessary
		$sid = $db->real_escape_string($sid);

		$query = "UPDATE sessions SET ses_refresh = NOW() WHERE ses_id = '" . $sid . "' AND ISNULL(ses_end)";

		if ($result = $db->query($query)) 
		{
			if ($db->affected_rows != 1)
			{
				die();
			}
		}
		else
		{
			die();
		}
	
		
		// init return value
		$rv = '<root>' . PHP_EOL;
		$rv .= '<session>' . PHP_EOL;
		
		
		// logout user
		$query = "UPDATE user_sessions SET use_logout = NOW() WHERE use_session = '" . $sid . "' AND ISNULL(use_logout)";
		
		if ($result = $db->query($query))
		{
			$rv .= '<logout>1</logout>' . PHP_EOL;
		}
		else
		{
			$rv .= '<logout>0</logout>' . PHP_EOL;
		}
		
		// finish return value
		$rv .= '</session>' . PHP_EOL;
		$rv .= '</root>' . PHP_EOL;
				
		
		// return data
		echo $rv;
		
		die;
	}
	else
	{
		header('Server: ');
		header('X-Powered-By: ');
		header("HTTP/1.0 404 Not Found");
	}

?>