Creating a Logout Page
In the previous tutorial, you protected pages so that only logged-in users could access them. In this tutorial, you will create a logout page that destroys the user's session and returns them to the login page.
Why Do We Need Logout?
When a user logs in, their information is stored in a PHP session.
For example:
user_id = 1
username = admin
To completely sign the user out, we need to remove this session information.
Create the Logout Page
Create a new file called:
logout.php
Add the following code:
Save the file.
Understanding the Code
The following line starts the current session:
session_start();
The following line removes all session data:
session_destroy();
Finally, the user is redirected back to the login page:
header("Location: login.php");
exit();
Test the Logout Page
First, log in to your application.
You should be redirected to:
http://localhost/members.php
Now manually visit:
http://localhost/logout.php
You should immediately be redirected to:
http://localhost/login.php
Verify the Session Has Been Removed
After visiting:
http://localhost/logout.php
attempt to access:
http://localhost/members.php
You should no longer have access.
Instead, you should be redirected back to:
http://localhost/login.php
This confirms that the session was successfully destroyed.
Add a Logout Link
Open:
members.php
Add the following code near the bottom of the page:
Logout
Example:
Members Area
Welcome,
User ID:
Logout
Save the file.
Test the Logout Link
Log in.
Open the Members Area.
Click the Logout link.
Confirm you are returned to the login page.
Attempt to revisit members.php.
You should be redirected back to the login page.
Complete logout.php File
Complete Updated members.php File
Members Area
Members Area
Welcome,
User ID:
Logout
You now have a complete authentication system that allows users to:
Register an account
Log in
Stay logged in using sessions
Access protected pages
Log out
Next tutorial: Adding Role-Based Access Control (Admin, Teacher and Student Accounts).