cookies & sessions

[pedalpete]

I'm building a facebook app, and have been following the guidelines and posting on the facebook message board, but can't seem to get anywhere.


Facebook creates a session and cookie on the users machine for the facebook application. However, logging out of facebook, does not remove this session or cookie.

I'm using

require_once('../facebook.php');
session_start();
    setcookie(session_name(), '', time()-42000, '/');
 
session_destroy();
 

to try to remove the session, but it looks like that is only removing the last entry of the cookie array (or params).

Any idea on how I can clear the entire cookie and session?
below is the code facebook uses to create the cookie. I've tried creating a function to recreate the cookie as empty, but no luck.

function logout_user($user, $session_key, $expires=-3600) {
    if (!$this->in_fb_canvas() && (!isset($_COOKIE[$this->api_key . '_user'])
                                   || $_COOKIE[$this->api_key . '_user'] != $user)) {
      $cookies = array();
      $cookies['user'] = $user;
      $cookies['session_key'] = $session_key;
      $sig = self::generate_sig($cookies, $this->secret);
      foreach ($cookies as $name => $val) {
        setcookie($this->api_key . '_' . $name, $val, (int)$expires);
        $_COOKIE[$this->api_key . '_' . $name] = $val;
      }
      setcookie($this->api_key, $sig, (int)$expires);
      $_COOKIE[$this->api_key] = $sig;
    }
    $this->user = $user;
    $this->api_client->session_key = $session_key;
  }
 

Thanks
Pete

[stepterr]

I'm building a facebook app, and have been following the guidelines and posting on the facebook message board, but can't seem to get anywhere.


Facebook creates a session and cookie on the users machine for the facebook application. However, logging out of facebook, does not remove this session or cookie.

I'm using

require_once('../facebook.php');
session_start();
    setcookie(session_name(), '', time()-42000, '/');
 
session_destroy();
 

to try to remove the session, but it looks like that is only removing the last entry of the cookie array (or params).

Any idea on how I can clear the entire cookie and session?
below is the code facebook uses to create the cookie. I've tried creating a function to recreate the cookie as empty, but no luck.

function logout_user($user, $session_key, $expires=-3600) {
    if (!$this->in_fb_canvas() && (!isset($_COOKIE[$this->api_key . '_user'])
                                   || $_COOKIE[$this->api_key . '_user'] != $user)) {
      $cookies = array();
      $cookies['user'] = $user;
      $cookies['session_key'] = $session_key;
      $sig = self::generate_sig($cookies, $this->secret);
      foreach ($cookies as $name => $val) {
        setcookie($this->api_key . '_' . $name, $val, (int)$expires);
        $_COOKIE[$this->api_key . '_' . $name] = $val;
      }
      setcookie($this->api_key, $sig, (int)$expires);
      $_COOKIE[$this->api_key] = $sig;
    }
    $this->user = $user;
    $this->api_client->session_key = $session_key;
  }
 

Thanks
Pete

This is what I use to clear my cookies.

[PHP]<?php
$past = time() - 100;
//this makes the time in the past to destroy the cookie
setcookie(ID_my_site, gone, $past);
setcookie(Key_my_site, gone, $past);
header("Location: login.php");
?>[/PHP]