[Resolved] I destroyed the cookies, WHY am i still logged in? =/

ElectricRain

I dont understand 🙁

<?php
ob_start();

include("config.php"); 

// connect to the mysql server 
$link = mysql_connect($server, $db_user, $db_pass) 
or die ("Could not connect to mysql because ".mysql_error()); 

// select the database 
mysql_select_db($database) 
or die ("Could not select database because ".mysql_error()); 

$match = "select id from $table where username = '".$_POST['username']."' 
and password = '".$_POST['password']."';"; 

$qry = mysql_query($match) 
or die ("Could not match data because ".mysql_error()); 
$num_rows = mysql_num_rows($qry); 

if ($num_rows <= 0) { 
echo "Sorry, there is no username $username with the specified password.<br>"; 
echo "<a href=login.html>Try again</a>"; 
exit; 
} else { 

setcookie("loggedin", "TRUE", time()+(3600 * 24)); 
setcookie("mysite_username", "$username"); 
echo "You are now logged in!<br>"; 
echo "Continue to the <a href=members.php>members</a> section."; 
}
ob_end_flush();
?>

Log OUT script

<?

include("config.php");

//destroy cookies 
setcookie("loggedin", "", time()-(36000 * 24)); 
setcookie("mysite_username", "", time()-(36000 * 24)); 

echo "You are now logged out.<br>"; 

?>

bradgrafelman

Works fine for me.. are you sure you're still logged in? Is it perhaps a browser cache issue?

EDIT: Note, that after your expiring setcookie() call (the one where you set the time in the past), the cookies will still be available in the $_COOKIE superglobal, as this is only updated at the beginning of a script's execution; not every time cookie information changes.

EDIT2: For a possible solution, try [man]unset/man'ing the $_COOKIE indeces too:

setcookie("loggedin", "", time()-(36000 * 24));  

setcookie("mysite_username", "", time()-(36000 * 24));
unset($_COOKIE['loggedin'], $_COOKIE['mysite_username']);

ElectricRain

Well, it appeared like I was definately still logged in- Soon as I returned to another page on the site it was saying Logged in as... username, even when I refreshed it.

Nehow, The unset thing fixed it. Thanks 🙂