--- docman.php	2001/12/14 17:28:06	1.49
+++ docman.php	2001/12/15 20:33:37	1.50
@@ -174,7 +174,22 @@
 <B><?= date($gblDateFmt) ?> -
 <?= date($gblTimeFmt) ?> -
 <?= $gblUserName ?>
-<small> [<a href="<?= $PHP_SELF ?>?relogin=<?= $gblPw ?>">logout</a>]</small>
+<?php
+	global $PHP_AUTH_USER,$PHP_AUTH_PW;
+	$url = $PHP_SELF."?relogin=";
+	if (isset($gblPw) && $gblPw != "") {
+		$url .= $gblPw;
+	} else {
+		$url .= md5($PHP_AUTH_USER.$PHP_AUTH_PW);
+	}
+	if (isset($PHP_AUTH_USER) && $PHP_AUTH_USER != "" && ($PHP_AUTH_PW == "" || !isset($PHP_AUTH_PW))) {
+		$url_title="login";
+	} else {
+		$url_title="relogin";
+	}
+	$url.="&AU=${PHP_AUTH_USER}|AP=${PHP_AUTH_PW}|";
+?>
+<small> [<a href="<?= $url ?>"><?= $url_title ?></a>]</small>
 </B>
 <BR><small>
 Document Manager <?= $gblVersion ?>, based on ANYPORTAL(php) Site Manager 
@@ -950,6 +965,8 @@
 
 	$title = "(401 Unauthorized)" ;
 	$text  = "No trespassing !" ;
+
+	global $PHP_AUTH_USER,$PHP_AUTH_PW,$gblPw,$relogin;
 	StartHTML($title,$text) ;
 
 	EndHTML() ;
@@ -1243,9 +1260,24 @@
 		Error("Configuration error","Can't find user handling module at <tt>$gblIncDir/$gblUsers.php</tt> ! Please fix <tt>$fsScriptDir/.docman.conf</tt>");
 	}
 
+	// if no password, or empty password logout
+	if (
+		isset($PHP_AUTH_USER) && (
+			!isset($relogin) || (
+				isset($relogin) && $relogin != md5($PHP_AUTH_USER.$PHP_AUTH_PW)
+			)
+		) && (
+			$PHP_AUTH_PW == "" || !isset($PHP_AUTH_PW)
+		)
+	   ) {
+		StartHTML("Logout completed","Your login credentials has been erased") ;
+		EndHTML() ;
+		exit ;
+	}
+
 	// authentication failure
 	if ( md5($PHP_AUTH_USER.$PHP_AUTH_PW) != $gblPw ||
-		isset($relogin) && $gblPw == $relogin ) {
+		isset($relogin) && $gblPw == $relogin) {
 		header("WWW-authenticate: basic realm=\"$HTTP_HOST\"") ;
 		header("HTTP/1.0 401 Unauthorized") ;
 		NoEntry() ;