Problem with still being able to access protected pages after logout.

Discussion in 'Setting-up protection' started by eatessami, Aug 18, 2011.

  1. eatessami

    eatessami New Member

    Joined:
    May 12, 2011
    Messages:
    5
    Not sure if I am putting this in the right forum, forgive me if I am not.
    I am having an issue with mac browsers, that even when I log out and I close the browser and I reopen it, I am still able to access pages that I have with the php include protection script like I am logged in. I do have the user name and password saving automatically for a period of 1 day, but the logging out should expire the cookie. (I assume you are using cookies?) I know that when I log out, I get prompted to relogin if attempting to reach an amember page, but another page that is outside amember (which is protected by the php_include script) is still available. If I close the browser, I get prompted to login, so I assume it's a session cookie that expired, but I am getting reports that even after closing the browser on a Mac (say Google Chrome for example) the page is still available. I know there is a way to put a command to force a cookie to expire/be removed, is there one that I can put on the logout.php page to acheive this, do you think this is necessary?

    Any advice would be appreciated.
  2. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    logout.php already should destroy session.
    Can you contact me in helpdesk and provide example login/password to access member's area. I will check what can be wrong.

Share This Page