CPT John W. Holmes <mailto:holmes072000@charter.net>
on Monday, July 21, 2003 12:39 PM said:

> You have the same session id, but there is no data in it, so what's
> the problem?

The problem is that the server is still regarding it as the same session
even if a different user comes along and logs in.

> You should still consider the user logged out since the
> session is empty, right?

Right, but the server isn't thinking of it this way.

> If you really want, upon logout, make a new session id with
> session_id(), md5() and uniqid().

This might actually work quite well.



Chris.