note 53242 deleted from ref.session by bjori
| From: | bjori@php.net | Date: | Sat, 30 Dec 2006 16:41:52 +0000 |
| Subject: | note 53242 deleted from ref.session by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-121102@lists.php.net to get a copy of this message | ||
Note Submitter: budfroggy a.t. adminmod d.o.t org
----
For those of you run into sess_deleted files in your temp session directory, and have users
complaining that they cannot log off, the cause is almost always due to the user's system time
being off. Make sure that the user properly sets his or her time, date and time zone.
As a side note, if two users have system times set in the past, and both log onto a system, they
will share the same sess_deleted file, which means that their identities could very well be swapped,
leading to possible security breachs. I am going to look into code that might forcefully prevent
this form happening.