Correct way of implementing Sessions and Cookies in PHP? - php

Question

I'm simple not able to handle the correct way of implementing Cookies and Sessions. I have everytime another error when I think I implemented the code properly.
When the user register or login I run this code:
session_start();
$_SESSION['SESS_USER_ID'] = $user_id;
$_SESSION['SESS_USER_NAME'] = $user_username;
$_SESSION['SESS_USER_EMAIL'] = $user_email;
$_SESSION['SESS_LOGGED'] = TRUE;
session_write_close();
setcookie("COOK_USER_ID",$user_id,time()+(3600*24*365));
setcookie("COOK_USER_NAME",$user_username,time()+(3600*24*365));
setcookie("COOK_USER_EMAIL",$user_email,time()+(3600*24*365));
setcookie("COOK_LOGGED",TRUE,time()+(3600*24*365));
On every page I want to protect I run this code:
session_start();
if(isset($_SESSION['SESS_LOGGED']) && isset($_COOKIE['COOK_LOGGED']))
{
}
elseif (isset($_COOKIE['COOK_LOGGED'])) {
$_SESSION['SESS_USER_ID'] = $_COOKIE['COOK_USER_ID'];
$_SESSION['SESS_USER_NAME'] = $_COOKIE['COOK_USER_NAME'];
$_SESSION['SESS_USER_EMAIL'] = $_COOKIE['COOK_USER_EMAIL'];
$_SESSION['SESS_LOGGED'] = TRUE;
session_write_close();
}
else {
include_once("register.php");
exit();
}
And when the user logs off I run this code:
if (isset($_GET['logout'])) {
//Destroy Session
session_start();
$_SESSION = array();
session_unset();
session_destroy();
header("Location: index.php");
//Unset the Cookies
if (isset($_SERVER['HTTP_COOKIE'])) {
$cookies = explode(';', $_SERVER['HTTP_COOKIE']);
foreach($cookies as $cookie) {
$parts = explode('=', $cookie);
$name = trim($parts[0]);
setcookie($name, '', time()-1000);
setcookie($name, '', time()-1000, '/');
}
}
exit();
}
But when I close the browser and start it again, there is always a weird behavior where the cookies are not set properly etc.
I don't know what I'm doing wrong. On all pages I run at first ob_start(); so the problem can't be a header related one.