No, I'm merely saying that function call is wrong.
PHP Code:
// line 111
if ($_REQUEST['cmd'] == "start") { unset($_SESSION); session_destroy; }
Now, you already have a call to unset the session data (and an incorrect call to
session_destroy(), which I'm surprised doesn't throw an error). It appears that in order to destroy any previous session data, either $_POST['cmd'] or $_GET['cmd'] must be set to '
start]'. Fix the session_destroy() call, pass
&cmd=start to the page and see what happens.
EDIT:
Ah, in looking at the page for
session_unset(), if you unset the entire $_SESSION global variable, it renders it useless. You probably want to change that line to
PHP Code:
if ( $_REQUEST['cmd'] == 'start' ) {
// empty the array
$_SESSION= array();
// destroy the session for good measure
session_destroy();
}