hey guys ...
can anybody tell me a php logout script.
I want to log out from one page which i was developing ,
i tried but it's not working. I have tried
session_destroy(),session_unset() functions
but they are not working.
If any one is having that script then please help me .

pank wrote:

hey guys ...
can anybody tell me a php logout script.
I want to log out from one page which i was developing ,
i tried but it's not working. I have tried
session_destroy(),session_unset() functions
but they are not working.
If any one is having that script then please help me .
>

Session_destroy should destroy all variables you have set in $_SESSION

Are you saying that the Session state is kept even after you close all
browsers?

Are you sure you're not using other cookies rather than Session data?

Tyno Gendo wrote:

pank wrote:

>
Session_destroy should destroy all variables you have set in $_SESSION
>

No it does NOT. They are valid as long as the script runs. A call to
$_SESSIONS=array(); after the session_destroy() clears the session
variables.

Sh.

On 13 Apr, 20:48, Schraalhans Keukenmeester <bitbuc...@invalid.spam>
wrote:

Tyno Gendo wrote:

>

>
No it does NOT. They are valid as long as the script runs. A call to
$_SESSIONS=array(); after the session_destroy() clears the session
variables.
>
Sh.

Does it HAVE to be that way around? I usually do it the other way
around: session_destroy then $_SESSIONS=array() and it works fine for
me.

If the original poster is doing this and still has problems; I would
suggest checking the session name on your logged in pages and also the
logging out page. Use the session_name() function to see this.
Personally I always use a custom session name for `security` purposes.

FrobinRobin wrote:

On 13 Apr, 20:48, Schraalhans Keukenmeester <bitbuc...@invalid.spam>
wrote:

>
Does it HAVE to be that way around? I usually do it the other way
around: session_destroy then $_SESSIONS=array() and it works fine for
me.
>
If the original poster is doing this and still has problems; I would
suggest checking the session name on your logged in pages and also the
logging out page. Use the session_name() function to see this.
Personally I always use a custom session name for `security` purposes.
>

I was a bit ambiguous in my phrasing. I use the same order you do.
technically I don't think there's much against the other way around,
from a logical point of view I think 'yours' is the preferred.

Sh.

Schraalhans Keukenmeester wrote:

FrobinRobin wrote:

Indeed. I've only ever used session_destroy() as the last statement
before quitting the page, so I never noticed. Seems a bit crap, after
all, you're asking it to 'destroy' the session, does anyone have a use
for destroying it and _still_ retaining the variables until script end?

Tyno Gendo wrote:

Schraalhans Keukenmeester wrote:

>
Indeed. I've only ever used session_destroy() as the last statement
before quitting the page, so I never noticed. Seems a bit crap, after
all, you're asking it to 'destroy' the session, does anyone have a use
for destroying it and _still_ retaining the variables until script end?

I never destroy a session. Rather, I unset variables which are no
longer needed. Destroying a session might make other pages start to fail
because of session variables they use.

And maybe the site doesn't have this potential problem now - but what
about later? It's things like this which take hours (or days) to track
down.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

Jerry Stuckle wrote:

Tyno Gendo wrote:

>
I never destroy a session. Rather, I unset variables which are no
longer needed. Destroying a session might make other pages start to fail
because of session variables they use.
>
And maybe the site doesn't have this potential problem now - but what
about later? It's things like this which take hours (or days) to track
down.
>

<coughI wish I could say "I haven't got the faintest idea what you
mean Jerry" </cough;-)

Sh.