problem in logout session

[vivekgs2007]

Hi Sir,
I used the user login page..it works properly, but problem is when a user clicks on logout it will come to index page, but when CLICK back BUTTON, the session is still not destroyed...
here is the code

session_start();
session_destroy();
header("Location:index.php");
 

[chathura86]

are you sure that the session is not destroyed?

refresh and make sure that it is destroyed, because you may be getting
the page from the browser cache

Regards

[vivekgs2007]

HI sir,
I refresh it, but no changes,Please tell me how to destroy the cache from the browser.

[chathura86]

remove the header("Location:index.php");
and see if you are getting any errors when you get to that page

Regards

[vivekgs2007]

ok i will try and get back to u.

[vivekgs2007]

Sir still the same problem...i opened in the new browser opera..where their is no cache or cookie..when i press a logout menu, It will move to the blank page, but when i press back button in browser, it will easily comes to the previous page...

session_start();
session_destroy();
//header("Location:admin.php");
//include("Localconnection.php");
 

Sir i started the session in all pages in the first line only..and after "Title" tag i written the code of checking session condition, is that correct

[chathura86]

yes you can check the session condition after the title

could you pleas show me the code you are using to check the
session.

and does it only work if you press the back button, what if you type
a url of a secure page and try to access it.


Regards
Chathura Bamunusinghe

[vivekgs2007]

hello sir,
i written the code is..

 include("Localconnection.php");
if(isset($_SESSION['username']))
{
$username = $_SESSION['username'];
 
}
else
 
$username = null;
 

[chathura86]

code seems to be ok, so if the session is destroyed $username should be null
but you can still see the $username right?

and does it only work if you press the back button, what if you type
a url of a secure page and try to access it.


Regards
Chathura Bamunusinghe

[vivekgs2007]

when a user enters to the page by entering username and password..then the username is displaying along with welcome..here is the code

        <h1>Welcome <?php
 
        $username = $_SESSION['username'];
          echo $username;
        ?> !!
        </h1>
 

when i press logout..and comes press the back button..the above code will display only "Welcome" not the name of user.

[chathura86]

so that means the session is destroyed and the $_SESSION['username'] is null
thats why you are not getting the username,

Regards

[vivekgs2007]

ya..but y it is going back to previous page....

[chathura86]

although you destroyed the session, it doesn't mean that user cannot go back,
user can always use the back button or type the url to get the page

what you can do is if the session is not exists or invalid redirect the user to another page (maybe login page), that's how you can prevent an unauthorized user from viewing the content

Regards

[vivekgs2007]

ok...can u send me the code how to do this...

[chathura86]

session_start();
 
if(!isset($_SESSION['username']))
{
       header("Location: login.php");
       die();
}
 

add this code code to top of your secure page(s).

here if the $_SESSION['username'] is not set
client will be redirected to the login page (login.php for an example)
die(); will ensure that the script will terminate if the header failed to
execute (to ensure the privacy of data)

Regards

[vivekgs2007]

Thank you very much..its working perfectly...

[vivekgs2007]

i am very great full to this site..thank chathrua...

http://www.eitech.in/