logout session - help!

[Anon]

hi...

i'm tryin to implement a login logout solution using php4 sessions. this is what i use for logging in:

if (username and password verified) {
session_start();
}

an include header in every subsequent files have these:

if (isset($PHPSESSID) {
session_start();
}

and for logging out:

session_start();
session_destroy();

the logging in, and header bit works fine. but, after logging out, the header still sees $PHPSESSID. the tmp session file gets destroyed fine, and i've tried using other functions like unset().

i could register a session variable and toggle the value, which would work, but less elegant, i think...

appreciate any help i can get, or hearing from others with same problem.

cheers!

[Anon]

try this instead:

if ($PHPSESSID) {
session_start();
}

[Anon]

Arta, tried that... $PHPSESSID still holds the full MD5 hash string.

Arta wrote:

try this instead:

if ($PHPSESSID) {
session_start();
}

[Anon]

Yeah, I'm getting the same problem. There's also no cookies visible on my machine when $PHPSESSID is visible.

[Anon]

Well, I think that's because session data is stored in temporary cookies, so they never show up as files.

Try this:

if(session_id()){
...
}