Log out problem

j_smith123

I am having weird problems with my log out form. When logging out, no error is displayed but the session file on the server is not deleted.

On top of that, if I delete the session file manually, then click on the back button of my browser (I am propagating the session id in the url) so that a link with the session id is displayed in the address bar and do a refresh, the session file is recreated again on the server!

my logout form only contains this:

 session_start ();
 session_unset ();
 session_destroy ();

Could anyone explain to me why this is happening?

thanx

marky2coats

session_destroy() destroys all of the data associated with the current session. It does not unset any of the global variables associated with the session, or unset the session cookie.

I dont think session_destroy() will remove the session file. This is done by garbage collector which is run every so often by PHP. You can increase the probability of the garbage collector being run therefore your session files being deleted more often. This can be set in your php.ini file.

Mark

j_smith123

thnx for the reply

But what about the session file being recreated if I visit a url which has the session id attached to it ?

How can I avoid this?

rgds

marky2coats

If you goto a page which has session_start(), you pass it a session id and the session hasnt been created yet then it will create the session file.

The only way I can think of stopping this is by checking if the session file exsits before excuting session_start().

Mark.