Re: Cannot destroy session cookie

Hi, how about setting a expiry time for the cookie. Like 45 min after logging in or whatever suits your needs. You could use session_set_cookie_params() and set the cookie lifetime to 0. That would at least prevent a login after the browser window is closed. Your site is nice by the way. cheers Johannes -- Grüße aus dem schönen Tübingen Johannes Janson ;) "Jens Kisters" <newsletters@rosomm-partner.de> schrieb im Newsbeitrag news:3ADDA79E.F1B18BB3@rosomm-partner.de... > Why destroying it "before" a user logs in? Isn't it In case the user did not log out properly, his session would still be marked as valid & logged in > better to start the session "after" a successful login? starting works fine, restarting is the problem > And then destroying the session when the user logs out. You can't count on an explicit logout, never rely on the users, they just don't act like you want them to ;) cu Jens -- Grüße aus dem schönen Kleve Jens Kisters rosomm et partner Agentur für neue Medien GmbH Dienstleistungszentrum am Weißen Tor - Eingang B Gocher Landstrasse 2 47551 Kleve / Bedburg-Hau Telefon: 02821 - 97856-20 Telefax: 02821 - 97856-77 j.kisters@rosomm-partner.de http://www.rosomm-partner.de -- PHP General Mailing List (http://www.php.net/) To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net For additional commands, e-mail: php-general-help@lists.php.net To contact the list administrators, e-mail: php-list-admin@lists.php.net