The code & the logic looks fine, what is the error you get.

On login_success.php or any other script that shows data which is only for logged in members the very first thing that you will have to check is existence of the session variables. If these exist then proceed else redirect the user to the login form.

Hope this helps.