Session stays registered for different logins

[Kudose]

Ok, so I log in with one username, and it says Welcome User1.

I click back, and log in with a different user and it says Welcome User1.

Now when I click log out with either username, it destroys the session. How do I get it so this doesnt happed. I mean so it will display the correct name and the correct info for each log in name...

Here is my code:

<?

include('dbinfo.inc.php');

$query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
$result = mysql_query($query) or die(mysql_error());
$rows = mysql_num_rows($result) or die(mysql_error());

if ($rows == '1') {
session_start();
session_register("username");
header("Location: secure.php");

} else {

echo" <font color='#000000'>ACCESS DENIED! </font> ";

}


?>

That was the verify part, here is the secure.php part:

<? 
session_start();
if (session_is_registered("username")) {

include('dbinfo.inc.php');
include('css.css');
include('top.php');


?>

    <tr> 
      <td width=593 height=1 colspan=2><img src="/images/black.gif" width=100% height=1></td>
    </tr>
    <tr> 
      <td width=593 height=1 colspan=2><img src="/images/black.gif" width=100% height=1></td>
    </tr>
  </table>

  <table cellpadding="0" cellspacing="0" border="0" width="656" align="center">


		<tr>
			<td colspan="2" width="621" bgcolor="#687B8C" valign="top">

			<table cellpadding="10" cellspacing="0" border="0" width="654">
    <tr> 
      <td valign="top"> <div align="center"></div>
        <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
          <tr> 
            <td bgcolor="#415369" width="465"><img src="/images/leftcorners_smallboxes.gif" alt="" border="0" width="32" height="32"> 
              <font face="Tahoma" color="#ffffff" size="4"><b>Login Accepted!</b></font></td>
          </tr>
          <tr> 
            <td bgcolor="#415369" height="120" width="465"><div align="center"> 
                <font color="#FFFFFF" size="2" face="Tahoma"><strong>Welcome 
                <?= $username ?>
                </strong> </font></div></td>
          </tr>
        </table>
        &nbsp; </td>
    </tr>
  </table>

			</td>
		</tr>

	</table>
	</td>
</tr>
</table>
<?
include('bottom.php');
} else {
header("Location: [url]http://kaboom.ionichost.com/index.php[/url]");
}
?>

And logout.php is just:

<?
session_start();
session_destroy();
include('css.css');
include('top.php');
include('dbinfo.inc.php');
?> 

    <tr> 
      <td width=593 height=1 colspan=2><img src="/images/black.gif" width=100% height=1></td>
    </tr>
    <tr> 
      <td width=593 height=1 colspan=2><img src="/images/black.gif" width=100% height=1></td>
    </tr>
  </table>

  <table cellpadding="0" cellspacing="0" border="0" width="656" align="center">

		<tr>
			<td colspan="2" width="621" bgcolor="#000000"><img src="/images/spacer.gif" width=1 height=1 alt="" border="0"></td>
		</tr>
		<tr>
			<td colspan="2" width="621" bgcolor="#D1DADE"><img src="/images/spacer.gif" width=1 height=1 alt="" border="0"></td>
		</tr>
		<tr>
			<td colspan="2" width="621" bgcolor="#687B8C" valign="top">

			<table cellpadding="10" cellspacing="0" border="0" width="654">
    <tr> 
      <td valign="top"> <div align="center"></div>
        <table width="100%" border="0" align="center" cellpadding="0" cellspacing="0">
          <tr> 
            <td bgcolor="#415369" width="465"><img src="/images/leftcorners_smallboxes.gif" alt="" border="0" width="32" height="32"> 
              <font face="Tahoma" color="#ffffff" size="4"><b>Logged out!</b></font></td>
          </tr>
          <tr> 
            <td bgcolor="#415369" height="120" width="465"><div align="center"> 
                <font color="#FFFFFF" size="2" face="Tahoma"><strong>You have 
                successfully logged out.</strong> </font></div></td>
          </tr>
        </table>
        &nbsp; </td>
    </tr>
  </table>

			</td>
		</tr>

	</table>
	</td>
</tr>
</table>
<?
include('bottom.php');
?>

Thanks so much in advance!

[batman]

I would suggest that you add the session_destroy(); tag on the login page also, that way everytime they go to the login page it will start over.

-Blake

[Kudose]

Didnt work... 🙁

<?

include('dbinfo.inc.php');

$query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
$result = mysql_query($query) or die(mysql_error());
$rows = mysql_num_rows($result) or die(mysql_error());

if ($rows == '1') {
session_start();
session_destroy();
session_register("username");
header("Location: secure.php");

} else {

echo" <font color='#000000'>ACCESS DENIED! </font> ";

}


?>

Also tried it with:

SESSION_START();
SESSION_DESTROY();
SESSION_START();
SESSION_REGISTER("username");

[batman]

Try turning this:

<?

include('dbinfo.inc.php');

$query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
$result = mysql_query($query) or die(mysql_error());
$rows = mysql_num_rows($result) or die(mysql_error());

if ($rows == '1') {
session_start();
session_destroy();
session_register("username");
header("Location: secure.php");

} else {

echo" <font color='#000000'>ACCESS DENIED! </font> ";

}


?>

Into this:

<?

include('dbinfo.inc.php');
session_destroy();


$query = "SELECT * FROM users WHERE username='$username' AND password='$password'";
$result = mysql_query($query) or die(mysql_error());
$rows = mysql_num_rows($result) or die(mysql_error());

if ($rows == '1') {
session_start();
session_register("username");
header("Location: secure.php");

} else {

echo" <font color='#000000'>ACCESS DENIED! </font> ";

}


?>

[Kudose]

Got an error saying it couldnt destroy session becuase one wasnt initial ized.

So i added session start() right above the session destroy, and I get no errors, but it still doesnt work. It still displays the original login until I click log out.

[batman]

This is what I would do if I was you. The login page just needs to be an html page. THen pass that page to a checkuser page. Then from there send to the Protected Page! If you want an example, you can go to the pages I created at:

http://www.1mspinc.com/login_form.html

User: y pass: test
User: u pass: test

If you want examples of my code, then I'll be happy to send them.
-Blake

[Tracer]

I drove myself crazy with this same problem:

I never found a fix...but it turned out that it was only happening on the server, not from remote users.

To this day it still happens on the server, but I have MANY browsers connecting remotely that have absolutely no problems.

you may want to try to this

<?
session_start();
session_unregister(your_VAR);
session_unregister(your_VAR2);
session_destroy();
$_SESSION=array();
?>

make sure there are no headers sent before these