Configure web server to deny all requests for the /logout URI, for
example with "require user nonexistent" thus forcing a reauthentication.
<body>
<p id="header">
-<strong> <?php if ($username) echo "<em>$username</em>@"; echo "$charity"; ?></strong>
<?php if ($username) { ?>
<a href="/city">Cities</a>
/
<a href="/hub">Hubs</a>
/
<a href="/donation">Donations</a>
-<?php } ?>
+
+<strong><em><?php echo $username; ?></em>@<?php echo $charity; ?></strong>
+<a href="/logout" class="smaller">logout</a>
+<?php } else echo "<strong>$charity</strong>"; ?>
</p>
<div id="main">
.small {
font-size: 75%;
}
+
+.smaller {
+ font-size: 25%;
+}