[Resolved] I'm stummed

[Megahertza]

I got this script that logs users in and it gathers info from txt file like username and password.. here is a example of a File for Megahertza.txt

Megahertza
Radeon
[e-mail]
Australia
Computers, Cars, PHP
03 : 27 : 54 , Wed : Oct : 2004

The first line is the username and the second is the password for this user.

If i log in with the username and password its says ("password corect") once i log off and then try to log in with the correct username but incroect password it still says corect password

session_start();  

header("Cache-control: private"); 
$name = $_GET[name];
$pass = $_GET[pass];
// Checks to see if the users file exists
$file = ('User/'.$name.'.txt');
if (file_exists($file)) {
$fp = file($file);
echo 'User exists';
// check to see if supplied password is equal to the 2nd line of user files
if ($pass == '$fp[1]') {
echo '<div align=\'center\'>Password matches selected User.</div>';
echo '<div align=\'center\'>You will be directed to the main page in 5 seconds.</div>';
$member = "yes";
$_SESSION["member"] = "yes";
$_SESSION["name"] = "$name";
} else {
echo 'Password Incorect';
echo '<div align=\'center\'>You will be directed to the main page in 5 seconds.</div>'; 
}
} else {
echo 'No such user exists in database';
} 

I have cut out all of the javascript redirection scripts

[rachel2004]

In your logout script, make sure you are unsetting all of the session variables that might contain something to indicate that the user is logged in. You could use this snippet at the end of your logout script to make sure:

echo "<pre>";
print_r($_SESSION);
echo "</pre>";

By the way, the code that you posted will not work as is. So if that is the example of the code that you used to login, it's possible that when you cut out your JavaScript lines, you also modified or cut out other PHP code that I might've used to spot the problem.

[Megahertza]

It seems to work as there are no error message in the output. When I login correctly it works as it I want it too, after this if i login incorrectly it still says password correct. this works in backs aswell. Maybe I'm going about this the wrong way... which i had mysql..... thanks man