Posted by Jacques on 02/18/05 20:41

I am developing an application. When the user signs in a Session ID is
created (for argument sake: 123). I have a sign out page that has the script
session_destroy() on it. This page directs me to the sign in page. When I
sign the same or any other user in again I get the same session id (123).

However, when I close the browser window and sign in again as any member,
the session id changes.

How does this work and how can I ensure that a unique session id is
allocated to every new user that signs in?

Jacques

[Back to original message]