Re: Destroying session id info

Is anyone familiar with a real world example of how to properly make session usages more secure? ----Original Message----- From: Mike <php-digest@custom87.net> To: dwalker <dwalker@healthyproductsplus.com> Date: Monday, April 14, 2003 12:58 AM Subject: Re: [PHP] Destroying session id info >Figure out how to give your own session_id (find the function in the >manual) and then generate an md5 or something from their >username/password. then only that user would have that session id, and >it would always be the same... (or you could just use a random string, >and md5 it) > >-Michael >On Sun, 2003-04-13 at 21:10, dwalker wrote: >> I know you can use session_destroy() and session_unset(). My problem is: when a user logs in and then logs out the same session ID is issued. Without the use of cookies, how do I ensure a new session id is issued. Ultimately, for obvious reasons, I want to prevent multiple users from obtaining the SAME session id. >> >> NOTE: I do not have access to any of the INI files -- they reside on my ISP's server. > >