Re: Session not destroying properly

try session_start(); before the if statement - otherwise it will always be FALSE...btw the 'unset()' is redundant i think. ----- Original Message ----- From: "Mike Yuen" <myuen@ucalgary.ca> To: "trogers" <trogers@ats.com.au> Cc: "Yasuo Ohgaki" <yohgaki@hotmail.com>; <php-general@lists.php.net> Sent: Wednesday, March 07, 2001 5:11 PM Subject: Re: [PHP] Session not destroying properly > Thanks for the suggestion, I tried that and it still doesn't seem to be > working. > Here's what i've got so far on my page (index.php). > > <?PHP > if(session_is_registered("CUserName")) > { > session_destroy(); > unset($CUserName); > header("Location: $PHP_SELF"); > } > else > { > session_register("CUserName"); > $CUserNameSession="CUserName"; > } > //SNIP > ?> > > Hope you can see something I don't. Thanks, > Mike > > On Tue, 6 Mar 2001, trogers wrote: > > > > > Hi > > You will need to kill the session data on the exit of your failed login not > > on entry to the login page as the data will already be overwritten by the > > previous session value. > > I use > > unset($name); > > unset($password); > > ... > > > > Tom > > > > > > At 04:24 PM 6/03/01 +0900, Yasuo Ohgaki wrote: > > >Do you use custom session handlers? > > >Try session_unset() also. It may help. > > > > > >Regards, > > >Yasuo Ohgaki > > > > > > > > > > Got a problem with sessions. > > > > > > > > On my index page, there's a place for people to login. Well, when I test > > > > with two different user names (ie: mike and jlo) it reverts to the first > > > > one when login fails. For example: > > > > I enter in the username "myuen" and a wrong password. I get my > > > > "Password/Username invalid" message which is what I want. > > > > > > > > The page refreshes, the username slot already has myuen in it from the > > > > last entry, I erase it, enter in a new username "jlo" and the correct > > > > password and it will not log me in. > > > > > > > > I know once you attempt to login, it saves the username as a session > > > > variable. On my index.php page, I have a script that checks if a session > > > > exists (particularly the Username), if it exists, destroy it otherwise, > > > > continue on. Obviously it's not destroying it once we enter in a wrong > > > > username and try to login again. > > > > > > > > Any ideas on how to fix this? > > > > > > > > Here's my coding: > > > > <?PHP > > > > if(session_is_registered("CUserName")) > > > > session_destroy(); > > > > > > > > session_register("CUserName"); > > > > $CUserNameSession="CUserName"; > > > > > > > > //SNIP > > > > ?> > > > > > > > > >-- > > >PHP General Mailing List (http://www.php.net/) > > >To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > >For additional commands, e-mail: php-general-help@lists.php.net > > >To contact the list administrators, e-mail: php-list-admin@lists.php.net > > > > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net >