PHP - Logging In Problem

Hey, i have a small problem with the logout part of my account system.

When i click the logout link, it directs me to the index page with an error (custom error stuff i made).

Heres my logout code

<?php
echo 'Behandler ...<br />';
if(isset($_SESSION['logged']) && isset($_SESSION['email']) && $_SESSION['logged'] == 1) {
    echo 'Logger ud, vent venligst...';
    unset($_SESSION['logged']);
    unset($_SESSION['email']);
    header('location: index.php?p=success&ploca=login&pid=1');
    exit();
} else {
    header('location: index.php?p=error&ploca=login&pid=5'); // This is where it jumps to directly.
    exit();
}
?>


The weird thing is, that the sessions email and logged is set, as you can see here;

//Printed with print_r($_SESSION);
Array ( [psite] => index [logged] => 1 [email] => a@b.c )


Anyone sees my problem?

hi phpfreaks 

Recently I tryed to create a login for my website and a logout using sessions.
The problem I have is: Whenever I log in I will be going to the homepage of the website. My session will be set and everything works fine. Now when I log out my session will be unset and destroyed. The problem is, is that whenever I go back in history I can still see my homepage. When I refresh that page the browser asks the user to resend it's information (probably because it has to do with using post in my login template).

b.t.w. is it a bad thing to use request and a .htaccess file for my login form?

So whenever a user logs in -> logs out -> goes back in history -> refreshes -> resend information
the user is not asked to answer any account and password information to get itself logged in again.

This troubles me for quite a while now  !

Here are the pages I use to login, logout and show the homepage:

Login.php:
Code: [Select]
<?php
  class Handler_Login extends Action_Handler
  {
      function __construct($action_handle)
      {
        parent::construct($action_handle);
        $this->action = $action_handle;
      }
       function secured_handler()
       {
           if ($this->session->check_session() == false)
           {
              $password = $_POST['password'];
              $username = $_POST['username'];
              $login = $this->dbh->Login($username, $password);
              if ($login == true)
              {
                  $this->session->set('username', $username);
                  $this->view->displayHome();
                  $this->view->display(); 
              }
              else
              {
                  echo "you are not logged in";
              }
           }
           else
           {
               $this->view->displayHome();
               $this->view->display();
           }
           
       }
  }
?>
Logout.php:
Code: [Select]
<?php
    class Handler_Loguit extends Action_Handler
  {
      function __construct($action_handle)
      {
        parent::construct($action_handle);
        $this->action = $action_handle;
      }
       function secured_handler()
       {
           $this->session->stopSession();
           $this->view->displayLogin();
           $this->view->display();
       }
  }
?>

Home.php:
Code: [Select]
<?php
  class Handler_home extends Action_Handler
  {
        public function __construct($action_handle)
       {
           parent::construct($action_handle);
           $this->action = $action_handle;
       }
       function secured_handler()
       {     
          if ($this->session->check_session() == false)
          {
              $this->view->displayLogin();
              $this->view->display();
          }
          else
          {
              $this->view->displayHome();
              $this->view->display();
          }
       }
  }
?>

Session.php:
Code: [Select]
<?php
    class Session
    {
         function __construct()
         {
             if(!isset($_SESSION))
             {
                session_start();
             }  
         }
         function set($name, $value)
         {
             $_SESSION[$name] = $value;
         }
         
         function get($name)
         {
             return $_SESSION[$name];
         }
    
         function stopSession()
         {
             unset($_SESSION);
             session_destroy();
         }
         
         function check_session()
         {
             if(isset($_SESSION['username']) && !empty($_SESSION['username'])) 
             { 
                return true;
             }
             else
             {
                return false;
             }         
        }
    }
?>
view.php:
Code: [Select]
<?php
      class view
      {
        private $tpl;
        function __construct()
        {
             
        }
        
        function displayStatus()
        {
            $status = file_get_contents("templates/status.tpl");
            $this->tpl = str_replace("%content%", $status, $this->tpl);
        }
        
        function displayLogin()
        {
            $this->tpl = file_get_contents("templates/login.tpl");
        }
        
        function displayHome()
        {
            $this->tpl = file_get_contents("templates/home.tpl");
        }
        
        function display()
        {   
            echo $this->tpl;
        }
      }
?>

now what I'm trying to do is: whenever the user goes back in history after being logged out, the page should be redirected to the login page. I have no idea how I would accomplish this.
I know it has got something to do with my login.php but I can't really make it redirect to itself since it will then most possibly start an endless loop of redirecting.

I'm using templates to display my pages, if neccesary I will post them too,
Thanks for your support and I hope this issue will get solved

I can seem to login it tells me to check my password and username but i dont know the username and password are correct here is my whole code 

<?php
	//start the sessoin
	session_start();
	
	//connect to db
	require "scripts/connect.php";
	
	$username = $_POST['username'];
	$password = $_POST['password'];
	
	$username = mysqli_real_escape_string($db,$username);
	$password = mysqli_real_escape_string($db,$password);

	if(isset($_POST['loginbtn'])){

	if(!empty($username) && !empty($password)){
	
	//sql command
	$getstaff = "SELECT * FROM `users` WHERE `username` = '$username'";
	
	//execute the query 
	$query = mysqli_query($db,$getstaff);
	
	//get the number of rows
	$num_rows = mysqli_num_rows($query);
	
	if($num_rows != 0){
	
	//get the info
	$rows = mysqli_fetch_assoc($query);
	
	//setting the data in indivaul variables
	$dbusername = $rows['username'];
	$dbpassword = $rows['password'];
	
	//getting the password the user enter and making it hash
	//in order for it to match in the database
	$password = md5($password);

	if($dbusername === $username && $dbpassword === $password){
	
		//create the session
		$_SESSION['username'] = $username;
		//redircet them to the control panel
		header("location: controlpanel.php");
	
	}else
		$msg = "Please check your username or password";
	}else
		$msg = "User does not exist";
	}else
		$msg = "Please enter your username and password";
	}
?>

This is where it is giving me a hard time

	if($dbusername === $username && $dbpassword === $password){
	
		//create the session
		$_SESSION['username'] = $username;
		//redircet them to the control panel
		header("location: controlpanel.php");
	
	}else
		$msg = "Please check your username or password";

Any ideas why its not letting me enter

First time poster so please bear with me.  Is there a script that will show me the process of my php program as it runs, maybe log it to a log file each step so I can see what is happening.  Fairly new to php so there maybe something that I can set there.  I can read the code and follow it there but I'd like to see it in a log after each step or after each process completes.  I have done this in the old days of dbase and it really helps with the errors that can develop. 

Thanks in advance and what a great forum.

Hi,
I've been semi-teaching myself curl, and I decided to try logging into Facebook with it.
This is what I have so far...

<?PHP
$Email = strip_tags(str_replace(' ', '', $_POST['email']));
$Password = strip_tags(str_replace(' ', '', $_POST['password']));

$FBlogin = 'https://www.facebook.com/login.php?login_attempt=1';

$MoreData = "charset_test=%E2%82%AC%2C%C2%B4%2C%E2%82%AC%2C%C2%B4%2C%E6%B0%B4%2C%D0%94%2C%D0%84&lsd=u2nsf&locale=en_US&email=".urlencode($Email)."&pass=".urlencode($Password)."&default_persistent=0&charset_test=%E2%82%AC%2C%C2%B4%2C%E2%82%AC%2C%C2%B4%2C%E6%B0%B4%2C%D0%94%2C%D0%84&lsd=u2nsf";
$Cookie = "cookie.txt";

$fp = fopen($Cookie,'wb');   

$agent = "Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.7.12) Gecko/20050915 Firefox/1.0.7";
//login to facebook
$ch = curl_init();
curl_setopt($ch, CURLOPT_URL,$FBlogin);   
curl_setopt($ch, CURLOPT_USERAGENT, $agent);
curl_setopt($ch, CURLOPT_COOKIEFILE, $Cookie);
curl_setopt($ch, CURLOPT_COOKIEJAR, $Cookie);
curl_setopt($ch, CURLOPT_REFERER, $FBlogin);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt($ch, CURLOPT_HEADER, 1);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 0);
curl_setopt($ch, CURLOPT_POSTFIELDS, $MoreData);
       
$Excecute = curl_exec($ch);
echo $Excecute;
?>


Right now I have it echo'ing out to see what's going wrong. I'm getting cookie errors from facebook saying that "I must have cookies enabled".
What could be wrong in my script that would trip such an error?
Thanks.