From 60a97bcf51c1bce469c974e0b6a62cf34b999067 Mon Sep 17 00:00:00 2001
From: Julian Lam <julian@nodebb.org>
Date: Fri, 15 Jul 2016 13:37:22 -0400
Subject: [PATCH] fixes #4856

---
 src/controllers/accounts/session.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/controllers/accounts/session.js b/src/controllers/accounts/session.js
index 8fdb180ded..dd9f0f4a88 100644
--- a/src/controllers/accounts/session.js
+++ b/src/controllers/accounts/session.js
@@ -16,7 +16,7 @@ sessionController.revoke = function(req, res, next) {
 
 	async.waterfall([
 		function (next) {
-			db.getSortedSetRange('uid:' + req.uid + ':sessions', 0, -1, next);
+			db.getSortedSetRange('uid:' + res.locals.uid + ':sessions', 0, -1, next);
 		},
 		function (sids, done) {
 			async.eachSeries(sids, function(sid, next) {
@@ -38,7 +38,7 @@ sessionController.revoke = function(req, res, next) {
 				return next(new Error('[[error:no-session-found]]'));
 			}
 
-			user.auth.revokeSession(_id, req.uid, next);
+			user.auth.revokeSession(_id, res.locals.uid, next);
 		}
 	], function(err) {
 		if (err) {