session destroy pb

[fredouille]

Hi all

I have a pb with the destruction of session vars

i have :

session_start();
$_SESSION['pseudo_membre']="toto";

on another page

session_start();
unset($_SESSION['pseudo_membre']);
session_unset();
session_destroy();

when I read the
$_SESSION['pseudo_membre'] in a 3rd page it is still set...and the session file on disk still contains the values...

any idea ?

[stolzyboy]

get rid of all that session_destroy, unset stuff, just do

$_SESSION['pseudo_membre']="";

[fredouille]

but why does the unset doesn't work ?

[stolzyboy]

PHP.net advises against mixing and matching the newer $_SESSION and things like unset, session_register, session_unset, etc...

they aren't very stable when used together, but using the $_SESSION way is the better way to go so people can't sneak invalid sessions in there...

[meediake]

unset($_SESSION);

[stolzyboy]

this could also be the problem...

A bug exists in when attempting to unset() a $_SESSION variable while register globals is turned on.

unset($_SESSION['variable']); // will only work with register globals off

unset( $_SESSION['variable'], $variable ); // will work with register globals on

This is detailed in http://bugs.php.net/bug.php?id=19586 but has not been fixed as of PHP 4.3.0

[fredouille]

noe of the solutions works...even when I do that :

$_SESSION['pseudo_membre']="1111";

the value don't change in the session file

[fredouille]

if found the shit

on the logout page...the inset of the session path was not set...you the unset was done in another dir..

what ever :

session_unset(); works fine