Logout is not working

Question

I have a logout button which doesn't seem to work well. After clicking on it I can still see the "Welcome username" and the logout button is still there as in the picture below. Please let me know what's missing on my logout.php.

May I also ask how I could redirect the user back to the orginal page after clicking logout ? I try to use "header('Location: ' . $_SERVER['HTTP_REFERER']);" but it doesn't work ?

Index.php

<?php
ini_set("session.save_path", "sessionData");
session_start();
?>

 <?php if (!isset($_SESSION['uName'])) { ?>
    <form method="post" action="logonProcess.php">
    <div>Username <input type="text" name="userName" placeholder="Username"></div>
    <div>Password <input type="password" name="pwd" placeholder="Password"></div>
    <div><input type="submit" value="Logon"></div>
    </form>
<?php } else { }?>



<?php if (isset($_SESSION['uName'])) { 
    $username = $_SESSION['uName'];     
    echo "<p>Welcome $username</p>\n";
?>
        <a href="logout.php">Logout</a>

<?php } else { }?>

Logout.php

<?php
unset($_SESSION['user']);
session_destroy(); // Destroying All Sessions
header("Location: index.php"); // Redirecting To Home Page
?>

Take a look at the manual about the referrer, http://php.net/manual/en/reserved.variables.server.php. It isn't always set. Should check and have a default if not `Not all user agents will set this, and some provide the ability to modify HTTP_REFERER as a feature. In short, it cannot really be trusted.`. — chris85, Nov 26 '15 at 02:41
Have you tried [This one](http://stackoverflow.com/a/3512570/3583859) Accepted Answer — Vijay Kumbhoje, Nov 26 '15 at 02:41
Why are you unsetting a different session variable than the one you set? — Barmar, Nov 26 '15 at 02:48

score 2 · Answer 1 · answered Nov 26 '15 at 02:50

2

Try starting session first:

Logout.php

<?php
  session_start();
  unset($_SESSION['uName']);
  session_destroy(); // Destroying All Sessions
  header("Location: index.php"); // Redirecting To Home Page
?>

source from: http://www.hackingwithphp.com/10/3/5/ending-a-session

answered Nov 26 '15 at 02:50

Ceeee

1,392
2
15
32

Winner winner, you can't access a session or even unset it without starting the session. – Darren Nov 26 '15 at 03:03

score 1 · Answer 2 · answered Nov 26 '15 at 02:41

1

try adding this to your logout file:

unset($_SESSION['uName']);

answered Nov 26 '15 at 02:41

Tivie

18,864
5
58
77

score 1 · Answer 3 · answered Nov 26 '15 at 02:50

1

All your scripts that use sessions need to use the same session.save_path setting. Since you set that in index.php, you also need to set it in logout.php. Otherwise, logout.php won't be able to access the session data.

answered Nov 26 '15 at 02:50

Barmar

741,623
53
500
612

Logout is not working

3 Answers3