PHP sessions won't destroy

Question

I'm experiencing problems when trying to destroy sessions they seem to be destroyed,

but if I click the back button the variables return, as regions of the page that should be hidden become visible again,

this part of the site is for administration The front part of the site also has a login but this does not occur

The admin part's index page is in a subfolder, I have a file called notLoggedIn.php, that I include on pages I want to lock administrator out of,notLoggedIn.php tests for the existence of a session that is set on loggin

when I logout, click the back button this actually works, it redirects me back to the admin index but, now it displays my username again and then I can't log back in???

I've tried

 $_SESSION = array()

if (isset($_COOKIES[session_name()])) { 
$params = session_get_cookie_params();
setcookie(session_name(), '', 1, $params['path'], $params['domain'], $params['secure'], isset($params['httponly']));
}
session_destroy()

Unsseting sessions by name

As I said this doesn't happen to the other part of the site...any suggestions?

It that's the "actual" code that you're using, start by adding ending semi-colons for both `$_SESSION = array()` and `session_destroy()` — Funk Forty Niner, Oct 31 '13 at 01:17

Crackertastic · Answer 1 · 2013-10-31T01:37:17.357

1

Does this occur when you refresh the page? My first though would be you are seeing a page cached by the browser. Try adding this to your pages when/after the user logs in:

header('Cache-Control: no-cache, no-store, must-revalidate');

edited Oct 31 '13 at 01:37

answered Oct 31 '13 at 01:10

Crackertastic

4,958
2
30
37

Fantastic, my browser was caching the session I think. Good fix. – Andy Mar 24 '16 at 03:18

score 1 · Answer 2 · answered Apr 23 '14 at 15:18

1

Sometimes the problem is that session_start() is forgotten before calling session_destroy().

answered Apr 23 '14 at 15:18

Filippo Mazza

4,339
4
22
25

score 0 · Answer 3 · answered Oct 31 '13 at 01:09

0

Browser may cache whole page's html and just display page from local memory w/o even sending request, not to mention executing php script on server.

It's about caching, which is affected among other things by type of request (GET/POST).

answered Oct 31 '13 at 01:09

kirilloid

14,011
6
38
52

score 0 · Answer 4 · answered Oct 31 '13 at 10:16

0

Thanks for your time guys but it seems that was a WAMP issue
Once I used MAMP, or uploaded live, so far, this issues haven't arisen.

Thanks again

answered Oct 31 '13 at 10:16

RasMason

1,968
4
32
54

PHP sessions won't destroy

4 Answers4