[RESOLVED] Destroy session

lerro

Can i destroy a session in a PHP script without any html in it? that is, <head> and <body>

or do i have to be in an actual html page for the session to be destroyed?

The reason i ask is, if the logout points to a script that has PHP that destroys the session without any html in it, then the script redirects to an html page after destroying the session, would this be proper?

bradgrafelman

PHP doesn't care what data you output... it's still going to do what you tell it to do.

lerro

Thanks for that. As a followup, if i have pages like this

index.php
page1.php
page2.php
page3.php
page4.php

and i want to control access to all of them using sessions, do i have to put session start on each page?

Or is it enough if i have a php script that acts as a controller and loads them, to have the session start in the constructor function of that controller class?

what i mean is, if the controller class has an object that connects to the database each time the controller is accessed, could session start be declared in there instead of littering it on each page, which one may easily forget to add session start, whereas a controller script that manages all access all those pages could have it in one place.

Would a declaration in the constructor apply to all includes that load the pages?

Derokorian

session_start(); should be one of, if not the first, thing parsed, therefore its probably best to do it at the top of the master controller, as opposed to in sub files as you may accidently forget it on a page OR add something to be output BEFORE.

Note:

To use cookie-based sessions, session_start() must be called before outputing anything to the browser.

check http://php.net/manual/en/function.session-start.php for more information.

Short answer yes it would apply to any pages loaded thru the constructor, however if you were to go straight to page2.php and not through the constructor BREAKAGE... simply deny access directly to scripts =D

lerro

Thanks, that resolves it