Help with killing sessions.

edwartine

Sorry to post this a second time, for some reason it went on saying it was resolved.

Okay, so I can't get rid of my sessions. It WON'T log out. I tried stuff I knew about, it didn't work. Then I grabbed some stuff from online, it still doesn't work. Here is my current patched up log-out code.

function logout_user($logouturl)
{
	// Initialize the session.
	// If you are using session_name("something"), don't forget it now!
	session_start();

// Unset all of the session variables.
$_SESSION = array();

// If it's desired to kill the session, also delete the session cookie.
// Note: This will destroy the session, and not just the session data!
if (isset($_COOKIE[session_name()])) {
   setcookie(session_name(), '', time()-42000, '/');
}

// Finally, destroy the session.
session_destroy();
unset($_COOKIE[session_name()]);
global $userdata;
unset($userdata);
header('Location: $logouturl');
}

bpat1434

What do you mean it won't log out? It won't forward to the $logouturl?

The reason it doesn't move to the logouturl is because when you issue the header command it issues:
Location: $logouturl
literally. In order to get the variable to be replaced with it's value, you need to either concatenate it like:

header('Location: '.$logouturl);

or encase it in double quotes, not single quotes.

header("Location: $logouturl");

Both are acceptable forms of the same thing.

edwartine

Oh, sorry. No it takes me to the url, but it won't kill the sessions. Like when i try to login with a different username, i get to the "logged in" page, and it is still having the same $SESSION values as before I logged out. it didn't erase the $SESSIONS.

samudasu

Call session_write_close before header.

session_write_close();
header("Location: $logouturl");

edwartine

still not working. Here are two files.

reg_login.php
http://pastebin.com/714640

functions.php
http://pastebin.com/714638

any thoughts?

samudasu

Sorry, session_write_close() shouldn't be used in this case. My mistake.
Try calling exit after header.

header("Location: $logouturl"); 
exit();

or here

logout_user(index.php);
exit();