Solved

session Destroy

Posted on 2004-09-22
13
1,960 Views
Last Modified: 2013-12-12
Hi

I have an application using php sessions, but when i try to logout the program and destroy sessions it does' not work this is my exit code

<?php session_start();
    session_unregister('first_name');
    session_unregister('user_level');
    $_SESSION=array();
    session_unset();
    session_destroy();
    include 'login_form.html';
?>
 
I receive no error but if i click back on browser ask me for refresh, after that i'm logged again

thanks

0
Comment
Question by:Alejandro_Lopez
  • 3
  • 3
  • 2
  • +2
13 Comments
 
LVL 36

Expert Comment

by:Zyloch
ID: 12128693
Hi Alejandro_Lopez,

Well, you only really need this:

<?php
session_start();
session_unset();
session_destroy();
?>

It also depends on your code for the page authenticating the login, and finally, try logging out, closing your browser, then going back to the page. See if it's still logged in.

Regards,
Zyloch
0
 
LVL 27

Expert Comment

by:Diablo84
ID: 12131873
When using $_SESSION (as opposed to the old method) you should unset session variables using the unset function (for induvidual variables) or $_SESSION = array(); to effictively reset the session data.

So in this case

<?php
  session_start();
  $_SESSION = array();
 session_destroy();
?>

is needed.

>> I receive no error but if i click back on browser ask me for refresh, after that i'm logged again

This sounds like you are resubmitting form data which is logging you in again.

There is two possibilities i can think of here, one is that it is the IE6 bug triggered by the use of session data with forms, in which case after session_start(); try adding:

header("cache-control: private");

The other is to process the login on a seperate page and use header redirects, eg. point your form to process.php

process.php will resemble the following:

<?php
//process login data as you was before
header("location: logged_in_page.php");
exit;
?>

That should prevent the need to refresh and also prevent the resubmitting of form data upon refresh.
0
 
LVL 2

Expert Comment

by:Lance_Frisbee
ID: 12170610
TRY THIS: I'VE EDITED THE CODE TO UNREGISTER TWO SESSION VARIABLES INSTEAD OF ONE HOW IT IS IN MY ORIGINAL CODE. IF THERE ARE ANY ERRORS, THAT IS THE REASON.

<?php

session_start();

//include function files for this application

require_once("functions.php");
$old_user1 = $_SESSION['first_name']; //store to test if they *were* logged in
$old_user2 = $_SESSION['user_level']; //store to test if they *were* logged in
$result_unreg1 = session_unregister("first_name");
$result_unreg2 = session_unregister("user_level");
$result_dest = session_destroy();

if (!empty($old_user1 && $old_user2))
{
     if ($result_unreg1 && $result_dest && $result_unreg2)
     {
          //if they were logged in and are now logged out
          echo "Your logout attempt was successful. You are now logged out.";
     }
     else
     {
          //they were logged in and could not be logged out
                                echo "Logout Was Unsuccessful";
     }
}
else
{
     // if they weren't logged in but came to this page somehow
     echo "You were never logged in, therefore, you weren't logged out.";
}

?>


BELOW IS MY ORIGINAL CODE ON HOW TO UNREGISTER AND DESTROY A SESSION USING ONE SESSION VARIABLE FOR A LOGIN:

<?php

session_start();

//include function files for this application

require_once("functions.php");
$old_user = $_SESSION['valid_user']; //store to test if they *were* logged in
$result_unreg = session_unregister("valid_user");
$result_dest = session_destroy();

if (!empty($old_user))
{
     if ($result_unreg && $result_dest)
     {
          //if they were logged in and are now logged out
          echo "Your logout attempt was successful. You are now logged out.";
     }
     else
     {
          //they were logged in and could not be logged out
                                echo "Logout Was Unsuccessful";
     }
}
else
{
     // if they weren't logged in but came to this page somehow
     echo "You were never logged in, therefore, you weren't logged out.";
}

?>

0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 2

Expert Comment

by:Lance_Frisbee
ID: 12170646
If you would like me to help with a way to have different access levels while only having one session variable, let me know. I have a whole login script designed especially for EE users :)

Cheers
Lance
0
 
LVL 27

Accepted Solution

by:
Diablo84 earned 500 total points
ID: 12565487
I have just read the question again and the problem seems a little more obvious this time. The browser is trying to resubmit form data which is expected behaviour when clicking the back button and returning to a page that has had post data submitted to it (in the same instance that refreshing will have the same effect). Presumably the logout is being triggered by a button click.

The work around for this is to process data in a seperate page as i said in my original comment.

Alejandro_Lopez, if you are still around and haven't fixed this, point your form to another page, for example, process.php then in that file:

<?php
//handle the SESSION data
header("location: destination.php"); //where destination.php is the page to redirect to
exit;
?>

Once you have redirected after handling the session data the refreshing issue will no longer be a problem. If you need any more help getting this working feel free to post back.

Lance_Frisbee, i looked through you code and could not see anything that would prevent the browser effect.

My recommendation is accept Diablo84 {12131873}
0
 

Author Comment

by:Alejandro_Lopez
ID: 12566818
HI all

sorry for stay out so many time, now i'll try Diablo84 comment, i think it's right
0
 
LVL 2

Expert Comment

by:Lance_Frisbee
ID: 12568123
Accept Diablo84. Mebbe Give me like 1 point if I'm reeeeally lucky :)
0
 
LVL 20

Expert Comment

by:Venabili
ID: 12624358
Alejandro_Lopez ,

Any news?
0
 
LVL 27

Expert Comment

by:Diablo84
ID: 12753615
Hi Alejandro_Lopez, did you find time to try the code?
0
 

Author Comment

by:Alejandro_Lopez
ID: 12824769
Sorry for not taking care of this

I 'm agreee

Regards and thanks to all of you for your support
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Developers of all skill levels should learn to use current best practices when developing websites. However many developers, new and old, fall into the trap of using deprecated features because this is what so many tutorials and books tell them to u…
Password hashing is better than message digests or encryption, and you should be using it instead of message digests or encryption.  Find out why and how in this article, which supplements the original article on PHP Client Registration, Login, Logo…
Explain concepts important to validation of email addresses with regular expressions. Applies to most languages/tools that uses regular expressions. Consider email address RFCs: Look at HTML5 form input element (with type=email) regex pattern: T…
The viewer will learn how to create and use a small PHP class to apply a watermark to an image. This video shows the viewer the setup for the PHP watermark as well as important coding language. Continue to Part 2 to learn the core code used in creat…

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question