Re: Sessions not destroyed
| From: | Marek Kilimajer | Date: | Fri, 08 Oct 2004 14:49:16 +0000 |
| Subject: | Re: Sessions not destroyed | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-198968@lists.php.net to get a copy of this message | ||
Hendrik Schmieder wrote:
Marek Kilimajer schrieb:Once again, the session timeout was never ment to be a security feature, it is merely a way to not choke the server with dead session files.Hendrik Schmieder wrote:OK, good point. So I redrew the request for deleting, when Apache is stopping , but not the other point. Your php code is a workaround, but no real solution .Anyway , if the apache service is stopped (I am not speaking about a crash) all session files must be deleted.Why? Why should users loose their sessions just because I need to restart web server?