So, while regenerating the session is the safest way to go, if you have to keep the session but need to remove any Symfony values be certain to clear them both.

$this->getUser()->getParameterHolder()->clear();
$this->getUser()->getAttributeHolder()->clear();

Thanks for the blog clearing this up!

Zairo: You should not be editing the plugin, if you need to override some of the functionality you should override the class in your own workspace.

You should check that the file that you are editing is actually the one that Symfony is loading – put die(“hello world”); in there or something and click logout, just to see if you are actually having any effect at all.

prjname/plugins/sfGuardPlugin/modules/sfGuardAuth/lib/BasessfGuardAuthActions.class.php:

public function executeSignout()

{
$this->getUser()->clearCredentials();

$this->getUser()->setAuthenticated(false);
$this->getUser()->getAttributeHolder()->remove(‘referer’); $this->getUser()->getParameterHolder()->removeNamespace(‘referer’);
$this->getUser()->getParameterHolder()->clear();
..
}

$this->getUser()->getParameterHolder()->clear()

This call clears everything you have set on $this->getUser()->setParameter(‘foo’, ‘bar’)

You’ve got to add session vars with $this->getUser()->setAttribute(‘varname’, ‘varvalue’, ‘yourNamespaceForVars’);

So if you are logging out you got to remove the namespace only and everything is fine.

$this->getUser()->getParameterHolder()->removeNamespace(‘yourNamespaceForVars’)

Kind regards,
Thomas Boerger