cookie deletion upon logging off in php

>
> $_SESSION=null;
> session_destroy();
> header('Location: '.£urltofirstpage);
>
> First of all, you are cleaning out the data in the session,
> and the redirect with header will ensure that you won't get the question about
> the "reposting". Killing a cookie needs a page extra to really it to be killed.
>
> --
>
> //Aho

my code goes here:

session_unset();
session_destroy();
header(location: "../login.php");
yet it rendered no help. keep pressing back button and when the
browser offered 'repost'
i still could get in. moreover in one event when the browser ended
inadvertently, on next start the browser
offer to restore previous session, i still get back to my site. i
don't know if this is browser-specific issue or php.
I used session_regenerate_id() after session_start()..

> $_SESSION=null;
> session_destroy();
> header('Location: '.£urltofirstpage);
>
my code is somewhat similar
session_unset();
session_destroy();
header("location: ./login.php");
on one event when the browser crash or got kill, and when i restart
the browser it offered to restore previous session i could get in
passing the authentication.. i wonder if this is browser specific
issue ( i used mozilla)

jayadiesel.DeleteThis@gmail.com wrote:
>> $_SESSION=null;
>> session_destroy();
>> header('Location: '.£urltofirstpage);
>>
> my code is somewhat similar
> session_unset();
> session_destroy();
> header("location: ./login.php");

You haven't ensured that the session is empty, just using destroy by itself
won't do the trick and it seems to be needed to kill the cookie itself too.

http://www.php.net/manual/en/function.session-destroy.php

session_unset() should only be used with PHP 4.0.6 or earlier.


> on one event when the browser crash or got kill, and when i restart
> the browser it offered to restore previous session i could get in
> passing the authentication.. i wonder if this is browser specific
> issue ( i used mozilla)

All mozilla browsers should drop the session cookies when they been closed,
not sure how it is when they are restoring, could be set with about:config and
change the right setting.

But see to empty the session variable and kill the cookie too, even if you get
a repost request at going back, then you should have at least got rid of the
session.

--

//Aho