Destroy is not working. when i logout it is redirecting to logout page what i have expected. and again i press back button it shows everything…<?php session_start(); session_destroy(); header("Location:login.php"); ?>
The back button is going to send you to a cached page, it doesn’t mean that you are actually viewing anything. You can test that by trying to do something on the page, and it should say that you are not authorized.