[SOLVED] Sessions destroying when browser closes

[9three]

Hey,

 

I'm using sessions for a log in. What I'm noticing though is that when I close the browser, the session does not destroy it self. I want the log in page to appear again if the browser is closed for security purposes.

 

I'm just using a basic session nothing complex:

 

      $_SESSION['username'] = $username;
      $_SESSION['user_agent'] = 1;
      header('Location: index.php');

[Lodius2000]

are you using cookies?

 

are you closing the browser window, or quitting the program?

 

if closing the window, is it a firefox tab, sessions persist from tab to tab in 1 firefox window

[9three]

No only sessions. And I close firefox completely.

[uniflare]

try using this:

 

setcookie("PHPSESSID",session_id(),null);

 

This will work as long as you are using cookies for the sessions (if u dont see phpsessid=f849fh49h8f084 in every URL on ur site then ur using cookies).

 

The cookie function when no argument is passed to the time part (null above), the cookie is usually destroyed upon browser exit.

 

Hope this helps;

 

EDIT: There is a php ini variable that is responsible for controlling the time a php session cookie remains intact. i believe: session.cookielifetime or similar.

[9three]

Are there any security issues using cookies that I should watch out for? I've always used sessions for log ins.

 

 

Hmm one more thing, I'm also using session regenerate id. Would that cause the trouble I am going through?

[uniflare]

By default, sessions use cookies to store the "Session Identifier Key", in a cookie called PHPSESSID.

 

IF you dont use sessions, you must pass the Session Identifier Via the URL, in the form of: http://www.web.com/index.php?phpsessid=a8b087ef087cb087a234

---

 

Cookies are as secure as form data, users can create.modify and delete cookies willingly, put whatever they want inside of them. As long as you properly "sanitise" the data coming from the cookie your script should be fine.

 

Hope this helps,

[9three]

That's weird, it's not doing it any more and I haven't changed anything. Weird. thanks the info.