> A better way might be to flag that user in db, Then next time they try
> and
> do anything you see the flag is set so you destroy their session. Not
> exactly
> what you want, but them same effect ultimately. And a preferable way of
> doing
> it too I think.