Check and destroy sessions if user comes from another site

[CassidyHunt]

I am having a problem that you can leave my page and come back whenever and the session appears to have remained in tack. How do you ensure that everytime a user logs initially onto the site a new session is started?

Thanks

cassidy

 

[BabyJeffy]

By destroying any session completely when they visit your login page (before they click the "login" button - as the page is loading).

Cheers,
Jeff

[tt]Jeff's Page [/tt][tt]@[/tt][tt] Code Couch

http://www.codecouch.com/jeff/

[/tt]

What is Javascript? faq216-6094

 

[DRJ478]

Sessions should expire when the expiration date/time has passed. A garbage collection routine usually is invoked and expired sessions are removed.

How are your sessions stored? In the file system? What OS is it?

Of course, you could always just destroy the session when the login page is accessed, as BabyJeffy sais. However, the session mechanism should work properly if the correct timings are set.