Destroying a session

chrima

Hi all,
Can anyone tell me where i might be going wrong.
I'm currently playing around with sessions. At the moment, i can successfully start a session but am unable to destroy it.
Here is the script i am using:

<?php
if($end == 'true'){
 // Only attempt to end the session if there 
 // is a $PHPSESSID set by the request.
 if(isset($PHPSESSID)) {
 $message = "<p>End of session ($PHPSESSID).";
 session_start(  );
 session_destroy(  );
 } else {
 $message = "<p>There was no session to destroy!";
 }
?>
<!DOCTYPE HTML PUBLIC 
 "-//W3C//DTD HTML 4.0 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd" >
<html>
 <head><title>Sessions</title></head>
 <body>
 <?=$message?>
 </body>
</html>

<?php
} else {
 // Initialize a session. This call either creates 
 // a new session or re-establishes an existing one.
 session_start(  );

 // If this is a new session, then the variable
 // $count will not be registered
 if (!session_is_registered("count")) 
 {
 session_register("count");
 session_register("start");

 $count = 0;
 $start = time(  );
 } 
 else 
 {
 $count++;
 }

 $sessionId = session_id(  );

?>
<!DOCTYPE HTML PUBLIC 
 "-//W3C//DTD HTML 4.0 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd" >
<html>
 <head><title>Sessions</title></head>
 <body>
 <p>This page points at a session 
 (<?=$sessionId?>)
 <br>count = <?=$count?>.
 <br>start = <?=$start?>.

<p>This session has lasted 
  <?php 
 $duration = time(  ) - $start; 
 echo "$duration"; 
 ?>
  seconds.<br>
  <br>
  <a href="session_test.php?end=true">End session</a>
</body>
</html>
<?
}
?>

Is there something i need to configure or is my script incorrect?
Any advice appreciated.

Cheers,
chrima

edwardsbc

As I understand it, session_destroy() only effects the session on FUTURE pages not the current page. To kill the session on the current page unset $_SESSION.

Also, I'm not sure checking for $PHPSESSID is indicative of an actual session being available. I would check to see if $_SESSION is set. Apparently the $PHPSESSID cookie remains even after a session_destroy(). Lots of notes on this over at the Manual

CaptianChaos

$_SESSION is not set until you call session_start()

hmmm...... you could

print_r($_COOKIE);

at the top to see what cookie's are getting passed (the SESSID gets passed via cookie).

OR, just don't worrk about whether the session existed or not:

print_r($_COOKIE);
if($end == 'true'){
 session_start(  );
 session_destroy(  );
 unset($_SESSION);
 $message = "<p>End of session.</p>";
?>
<!DOCTYPE HTML PUBLIC 
 "-//W3C//DTD HTML 4.0 Transitional//EN"
 "http://www.w3.org/TR/html4/loose.dtd" >
<html>
 <head><title>Sessions</title></head>
 <body>
 <?=$message?>
 </body>
</html>

<?php
} else {
...