Same SESSID after session_destroy

[Mat]

Hi,
I'm trying to renew a session by using session_destroy () before
starting a new session on the next page. Unfortunately, it seems that
I keep getting the same SESSID (using $_REQUEST["PHPSESSID"]) when the
session starts again. I made a test page to simplify the problem and
it still happens:

<?
session_start() ;
echo "SESSID = ".$_REQUEST["PHPSESSID"];
session_destroy ();
?>

If I refresh this page, I would expect it to give me a new sessid each
time, but it doesn't. Is there something I'm not understanding here?
I also tried putting a couple of extras in like:

unset($_REQUEST["PHPSESSID"]);
session_unset() ;

Looking forward to hearing from someone!
Thanks,

Mat

[Pedro Graca]

Mat wrote:

I'm trying to renew a session by using session_destroy () before
starting a new session on the next page. Unfortunately, it seems that
I keep getting the same SESSID (using $_REQUEST["PHPSESSID"]) when the
session starts again.
Yes, that happens. What do you need the session id for?
See below for how I check if a session is new.
I made a test page to simplify the problem and
it still happens:

<?
session_start() ;
echo "SESSID = ".$_REQUEST["PHPSESSID"];
session_destroy ();
?>

If I refresh this page, I would expect it to give me a new sessid each
time, but it doesn't. Is there something I'm not understanding here?
I also tried putting a couple of extras in like:

unset($_REQUEST["PHPSESSID"]);
session_unset() ;

Looking forward to hearing from someone!

<?php
session_start() ;
if (!isset($_SESSI ON['counter'])) $_SESSION['counter'] = 0;

if ($_SESSION['counter'] == 0) {
/* NEW SESSION, probably same id */
echo "NEW SESSION<br/><br/>\n\n";
}

++$_SESSION['counter'];
echo 'session id: ', session_id(), "<br/>\n";
echo 'counter: ', $_SESSION['counter'], "<br/>\n";
if ($_SESSION['counter'] == 3) {
session_destroy ();
session_unset() ;
echo "session destroy'd and unset'd.<br/>\n";
}
?>
--
USENET would be a better place if everybody read: : mail address :
http://www.catb.org/~esr/faqs/smart-questions.html : is valid for :
http://www.netmeister.org/news/learn2quote2.html : "text/plain" :
http://www.expita.com/nomime.html : to 10K bytes :

[R. Rajesh Jeba Anbiah]

we*********@mat thewmarlow.com (Mat) wrote in message news:<89******* *************** ****@posting.go ogle.com>...

Hi,
I'm trying to renew a session by using session_destroy () before
starting a new session on the next page. Unfortunately, it seems that
I keep getting the same SESSID (using $_REQUEST["PHPSESSID"]) when the
session starts again.

<snip>

My knowledge is much theoretical and I guess few possibilities for
the cause:

1. session_destroy () destroys the session file on the server. But, it
doesn't remove the session cookie (which holds the session id) or
doesn't remove the trans sid
2. PHP's session is "permissive " which means you can send any session
id to the server and PHP will create a new session (file) if there is
no such session (with the session id that you pass)
3. So, though session_destroy () destroys the session file, the
current session id found in cookie is still passed to the server which
in turn generates the session with same session id. (Untested
suggession: try deleting the session cookie.)

HTH

--
| Just another PHP saint |
Email: rrjanbiah-at-Y!com