Login Security problem ?

I made a simple test.
In the event : After successful login I put a code for redirect and exit. Only this code

header("Location: test.php");
exit();

Never a login should work. right ?


I build and view in the browser . I entered login and password and "REMEMBER ME" activated.
I was redirected to the localhost/test.php. That is ok.

Than I changed the address in the browser to localhost/login and hit refresh,
and I entered into my website menu. No redirect.


That is not good, because I want to check a exire date of a account in the after successful login event
and I dont know if all Session veriables i want to put there are set.

What can I do. Is this normal ?