If your Set-Cookie: header is being displayed in the browser, then the browser isn't seeing it as a header. It looks like you're printing some HTML first, and then trying to send the header with cookies later, so it's being seen as part of the page text. Make sure you print the header first, before any other output.