specific session destryoing

[blink359]

Hi there im trying to destroy a specific session i have been looking through  many different ways on google but have yet to find one the reason i want to do this is because my website part of the website that is being made has to have a login to view everything and this login ontop to view restricted content, so far my logout has destroyed both sessions and i cant find an answer, all the nessecory scripts are listed below

Login:

<?php
if(isset($_POST['code']))
{
$host="***********"; // Host name 
$username="*************"; // Mysql username 
$password="************"; // Mysql password 
$db_name="******"; // Database name 

// Connect to server and select databse.
mysql_connect($host, $username, $password);
mysql_select_db($db_name);

// username and password sent from form 
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

// encrypt password 
$encrypted_mypassword=md5($mypassword);

$sql="SELECT * FROM members WHERE username='$myusername' and password='$encrypted_mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
session_register("myusername");
session_register("mypassword"); 
header("location:jncomenu.php");
}
else {
echo "Wrong Username or Password";
}
}
?>

Check session:

<? 
session_start();
if(!session_is_registered(myusername)){
header("location:JNCOlogin.php");
}
?>

Logout:

<? 
session_start(myusername);
session_destroy(myusername);
header("location:index.php");
?>

The first session is the same script bar

[session_register("username");

session_register("password"); /php]

 

Any help will be greatly appriciated.

 

Thank,

 

Blink359

[BlueSkyIS]

i don't see session_start(); at the top of the first file.

[Pikachu2000]

session_register() and session_is_registered() are both deprecated as of PHP 5.3.0.

[blink359]

so

session_start(myusername); 
session_start(mypassword); 

 

Rather than

 

session_register("myusername");
session_register("mypassword");

[ignace]

Destroying a specific session works best if you store it in a database using session_set_save_handler. Using this technique also gives you other advantages like ban/log-out a user, in-place access-control editing, ..