Marek Kilimajer schrieb:
Hendrik Schmieder wrote:
Anyway , if the apache service is stopped (I am not speaking about a crash) all session files must be deleted.
Why? Why should users loose their sessions just because I need to restart web server?
OK,
good point.
So I redrew the request for deleting, when Apache is stopping , but not the other point. Your php code is a workaround, but no real solution .
Once again, the session timeout was never ment to be a security feature, it is merely a way to not choke the server with dead session files.
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php