Re: Logout problem - help me out....!

HTTP authentication (which is what you're using) is controlled by the browser. Some browsers even keep the login/password after the window is closed until the user logs out (Konqueror on Linux for one...) If you want more control over logins and the ability to do a logout, you should make your own login scheme using an HTML form for username/password and setting a cookie to flag that the user is 'logged in'. Then, when the user wants to log out, clear the cookie and job done :) -- Shane On Saturday 15 Dec 2001 5:37 am, J.F.Kishor wrote: > hello all, > > I have already posted this mail, Is there anyone to help me out?, > it's urgent plz.....! > > I have designed a web page using php, as a security measure I have > kept it password protected. I have used Apache authentication, using > htpasswd file. Now I want to keep a logout in this web page, I tried to > send a header request "http/1.0 401 Unauthorized" to force it to > reauthenticate when the logout link is clicked in the form, but this dose > not work. > > I tried using session_destroy() even that does not work. > > To get the authenticated users name I have used GetEnv("REMOTE_USER") in > all the form and with that username I'am handling mysql and other > requests. I don't know where exactly the REMOTE_USER gets stored. > > So please help me out in this problem. I want to remove the > window's authentication cache. > > Please give me some ideas and suggestion to remove the user name and make > the page fresh for the other user to log in. > > If possible please send me a sample script. > > Thanks for sparing time on this mail. > > with hope's, > - JFK > > kishor > Nilgiri Networks