destroying session variables<

liunx

Guest
if i open two browser windows and login in both windows, then logout of one and refresh the second one, i am still logged in in the second one
i guess the session varibles are stored with different names
is there anyway this can be overcome using session variables?

logout code:
<?php
session_start();
unset($HTTP_SESSION_VARS['valid_user']);
unset($HTTP_POST_VARS['username']);
unset($HTTP_SESSION_VARS['access_level'] );
session_destroy();
?>no, you have to close the browser window to actually destroy it and create a new one.

unset($_SESSION['valid_user']);
unset($_POST['username']);
unset($_SESSION['access_level'] );

should be using those instead.

if you open 3 windows on the same site it will be the same session for all 3 windows.is there no way around that?
im assuming not all users will be security conscience and may log out but leave another window open.
do i have to use another technique to overcome this?
 
Back
Top