Session not destroy after logout in php

Question

I have research a lot and I have yet to find the solution to my problem. I clik a link for the user to logout the user then is redirected to the login page. The problem is that when the user is redirected it still logged in. This is my code to logout the user.

session_start();
  $_SESSION = array(); //destroy all of the session variables
  unset($_SESSION['valid']);
  unset($_SESSION['userid']);
  unset($_SESSION['username']);
  session_destroy();
  Header("Location:login.php");
  exit;
}

Are you sure you don't have a `cookie` which holds user information? `print_r($_COOKIE);` to see. — sjdaws, Feb 27 '13 at 03:58
This may help: http://stackoverflow.com/questions/1684187/php-session-is-not-destroying-after-user-logout?rq=1 — Chris Forrence, Feb 27 '13 at 04:01
Also might want to look at: http://stackoverflow.com/questions/7370264/sessions-in-php-exists-after-destroying?rq=1 — Chris Forrence, Feb 27 '13 at 04:04
[`session_destroy()` example](http://php.net/session_destroy#refsect1-function.session-destroy-examples) — Ja͢ck, Feb 27 '13 at 04:05
@emurray: create a single several-lines script to reproduce the behaviour and show it to us. Here `session_destroy()` works as expected. — zerkms, Feb 27 '13 at 04:21
@zerkms Sorry I'm new to this and I don't quiet understand what you are traying to tell me. — emurray, Feb 27 '13 at 04:27
@emurray: create trivial file from the scratch: that creates a session and fills it with data (just couple dummy strings are fine), and another one, that destroys it. And check if it works. — zerkms, Feb 27 '13 at 04:30
If you're using multiple session names, you may destroy one but not the other. — Ja͢ck, Feb 27 '13 at 04:37
I finally solve it with the domain answer. Thanks for all your help. — emurray, Feb 27 '13 at 04:43

score 1 · Accepted Answer · answered Feb 27 '13 at 04:02

Make sure that both login and logout page's subdomains are the same

as the session's cookie is domain based by default unless you change that.

session_set_cookie_params ( int $lifetime [, string $path [, string $domain [, bool $secure = false [, bool $httponly = false ]]]] )

score 0 · Answer 2 · answered Sep 22 '15 at 07:36

0

i faced similar problem and yes, i found that my cookies are set; so simply adding following code helped me to get rid of it:

if(isset($_COOKIE[session_name()])):
setcookie(session_name(), '', time()-7000000, '/');

endif;

answered Sep 22 '15 at 07:36

Maximus

1
3

Session not destroy after logout in php

2 Answers2