Logging out of frames session problem.

bluns

hey guys, i have made and administrator area which when logged in displays the administrator area in frames.

Portion of login area which contains frames...

................
<?php
 if (isset($_SESSION['administrator']))
   {
//administration area frame 
session_start();
?>

<html>
<head>
<title>administrationarea</title>
</head>
<frameset rows="*" cols="180,*" frameborder="YES" border="0" framespacing="0">
  <frame src="frame4.php" name="leftFrame" scrolling="YES">
  <frameset rows="20,*" frameborder="NO" border="0" framespacing="0">
    <frame src="frame3.php" name="topFrame" scrolling="NO" noresize>
    <frame src="frame2.php" name="middleFrame">
  </frameset>
</frameset>
<noframes><body>
</body></noframes>
</html>
<?php

The left payne contains the logout link which opens logout.php in _top Target.

logout.php

 <?php
session_start();
session_destroy();?>

When i logout and i press the back button it displays this message

Warning: Page has Expired The page you requested was created using information you submitted in a form. This page is no longer available. As a security precaution, Internet Explorer does not automatically resubmit your information for you.

To resubmit your information and view this Web page, click the Refresh button.

But apon pressing the refresh button it displays the administrator area 🙁

Is there anything i need to consider when logging out with frames or have i done something wrong?

Thanks

jpmoriarty

try doing session_unset() before your session_destroy()

bluns

Originally posted by jpmoriarty
try doing session_unset() before your session_destroy()

Thanks for your help, although im still having the same problem ;(

jpmoriarty

...okay try:

session_start();
unset($_SESSION['administrator']);
session_unset();
session_destroy();

bluns

thanks jpmoriarty

It seems to work the first time when i log in/logoff

but if i log in a 2nd time and log out it has the same problem (back to refresh screen and will display the frames)

bluns

heres what i mean

the login form (index.php) does two things check if username is correct, if so display the framed admin area else display the login form.

when i logout the first time, when i press the back button it will show the login form, when i login again and logout the 2nd time it displays the refresh page, and when reloaded it will say im logged in as administrator 🙁

the funny thing is this doesnt happen when i load index.php via url, only if i press the back button

jpmoriarty

does it let you use any links or see anything "valuable" (i.e. are you actually still logged in, or does it just display the page that says you are)? If not then I wouldn't worry about it

bluns

Thanks for your reply, yes the session still works when i press the back button and will act as if i am logged in whilst clicking on any administrator links which would normally send the user to the login page otherwise...

Only when i close internet explorer and reopen it will show me as logged off and i cannot view the page...

Im thinking this is more of an issue to do with sessions?