Marko Wyatt Jun?aj - 2018-02-10 15:32:34
In user.php file where it checks for valid session status there is a bug. The line "if($_SESSION['user']['id'] != ''){" should contain != and not !== like in the file that you download with it, as it always returns true and shows you empty user page instead of redirect.
Also, if session is ended by timeout instead of logout, there are error messages as "user" and "id" are not defined anymore.
This is a must fix for use.