PHP 在页面刷新或退出时销毁会话

Question

I am working on a PHP application that allows users to process a payment online. The process is as follows;

• user visits /index.php and selects button to 'pay now'
• user is redirected to worldpay and payment is processed
• after successful payment worldpay sends a success parameter to my /callback.php and this is where I set $_SESSION[status] = 'success' before redirecting back to /index.php

This all works as expected, if the payment was a success I am able to display a success message, however the message remains even when the user visits other pages of the site and returns to /index.php , it also remains if browser tab is closed and re-opened.

In my /callback.php file I have;

session_start();
// get status sent by worldpay url
$status= $_GET['status'];

if($status=== 'success') {
    $_SESSION['status'] = 'success';
    header('Location: index.php');
    exit();
}

In my /index.php I am checking for the session and displayin the message as below;

if ( isset($_SESSION['status']) && ($_SESSION['status'] === 'success') ) {
    echo 'success msg';
}

I only need to display the success message once to the user.

How can I destroy $_SESSION['status'] whenever the user;

• refreshes the page
• leaves the page
• closes tab

Should I be using cookies or some other method?

Answer 1

Maybe you can unset the $_SESSION['status'] after displaying the success message ONCE.

if ( isset($_SESSION['status']) && ($_SESSION['status'] === 'success') ) {
   echo 'success msg';
   unset($_SESSION['status']);
}