#24885 [Com]: session_destroy() should optionally take session id as parameter
| From: | mjs15451 at hotmail dot com | Date: | Sun, 10 Apr 2005 02:54:58 +0000 |
| Subject: | #24885 [Com]: session_destroy() should optionally take session id as parameter | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-76584@lists.php.net to get a copy of this message | ||
ID: 24885
Comment by: mjs15451 at hotmail dot com
Reported By: dan at danposluns dot com
Status: Open
Bug Type: Feature/Change Request
Operating System: Mac OS X (Unix)
PHP Version: 4.3.2
New Comment:
I came up with a solution here since the php developers don't see a
need for this: http://bugs.php.net/bug.php?id=24096
Previous Comments:
------------------------------------------------------------------------
[2003-07-31 09:40:21] dan at danposluns dot com
Description:
------------
It would be very useful to have session_destroy()
optionally take a session id as a parameter.
This would be useful for people who want to help
prevent hijacked sessions by using
session_regenerate_id(). A subsequent call to
session_destroy([previous session id]) would keep
hijackers from using the old session file, and is much
simpler than trying to unlink the file manually.
------------------------------------------------------------------------
--
Edit this bug report at http://bugs.php.net/?id=24885&edit=1