hmm.. but there must be some other way to do this. I know one site which is handling this problem.
check out http://www.web.de Andy "Rasmus Lerdorf" <[EMAIL PROTECTED]> schrieb im Newsbeitrag [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > > My question is: > > Is there a way to close this hole and let the session expire as soon as only > > the active window > > is closed? > > Nope, that's how browsers work. Your only real way to fix it would be to > expire a session after a certain amount of inactivity. That's what the > PHP sessions do by default - 24 minutes of inactivity and the session data > is expired. > > There is no way to detect a user closing one window of a browser session. > > -Rasmus > -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php