logout.php没有session_destroy

Question

My problem with logout.php but maybe not ! Logout.php is definitely working. When user loged in and then he click logout button logout.php redirect index.php

My index.php is login and register page. When user loged in index.php redirect main.php , and then when user click logout user redirect index.php it still works. Hoverwer if user write in url http://www.example.com/main.php after user logedout url said you are still loged in.

index.php code

<?php
ob_start("ob_gzhandler");
error_reporting(0);
include_once 'includes/db.php';
include_once 'includes/User.php';
session_start();
$session_uid=$_SESSION['uid']; 
if(!empty($session_uid))
{
    header("location:main.php");
}

$User = new User();

//Login
$login_error='';
if($_POST['user'] && $_POST['passcode'] )
{
    $username=$_POST['user'];
    $password=$_POST['passcode'];
    if (strlen($username)>0 && strlen($password)>0)
    {
        $login=$User->User_Login($username,$password);

        if($login)
        {
            $_SESSION['uid']=$login;
            header("Location:main.php");
        }
        else
        {
        $login_error="<span class='error'>Wrong password or username!</span>";
        }
    }
}

//Registration
$reg_error='';
if($_POST['email'] && $_POST['username'] && $_POST['password'] )
{
    $email=$_POST['email'];
    $username=$_POST['username'];
    $password=$_POST['password'];

    if (strlen($username)>0 && strlen($password)>0 && strlen($email) )
    {
        $reg=$User->User_Registration($username,$password,$email);

        if($reg)
        {
            $_SESSION['uid']=$reg;
            header("Location:main.php");
        }
        else
        {
            $reg_error="<span class='registererror'>Username or Email is already exists.</span>";
        }


    }
}

?>

session.php code

 <?php
$session_uid=$_SESSION['uid']; 
// Session Private
if(!empty($session_uid))
{
    $uid=$session_uid;
    $login='1';
}
else if($_GET['username'] || $_GET['msgID'])
{
    $uid=$Wall->User_ID($username);
    $login='0';
}
else
{
    $url=$base_url.'index.php';
    header("location:$url");
}

?>

logout.php code

 <?php
error_reporting(0);
session_start();
$_SESSION['uid']=''; 
if(session_destroy())
{
    $url=$base_url.'index.php'; 
    //header("Location: $url");
    echo "<script>window.location='$url'</script>";
}
?>

I'm doing something wrong or missing. Please help me... Sory for my english :(

Answer 1

尝试只是这样做：

unset($_SESSION['uid']);

Answer 2

在session.php您不启动会话：

session_start();

Answer 3

Try this code from logout.php :

<?php 
   session_start();
    session_destroy();
    header('Location: index.php');
?>