logout problem with sessions

guarez

hi.. i have a web with 2 types of users (admin & noadmin)
my quiestion is how i can close the users session , because if admin login to the system, and click on "logout" link, other user (on the same PC) can click on the "Admin link" and get it without autenticate, the system dont ask for password:rolleyes:

any help?¿

SLAYeeK

If you didn't use username and password... Hmmm

How admin login into secret area? :-)

downsize

check your session variables, $_SESSION if you are running php >= 4.1.0

you should be empting out your session that holds the id that you are verifying for the login.

SLAYeeK

Wait wait wait...

How administrator enter to site? Without login and password it's impossible.

If admin enter to site with login and password, then in logout function clear session vars.

For example:

$_SESSION["pass"] = '';

Yes, other user (on the same PC) can click on the "Admin link", but now they wil be see "Incorrect password, Please enter corrcet password". =)

...or i am inderstand your question.... =)