How to kill a/all php sessions?

by

You could try to force PHP to delete all the sessions by doing

ini_set('session.gc_max_lifetime', 0);
ini_set('session.gc_probability', 1);
ini_set('session.gc_divisor', 1);

That forces PHP to treat all sessions as having a 0-second lifetime, and a 100% probability of getting cleaned up.

The drawback is that whichever unlucky user runs this first will get a long pause while PHP does cleanup, especially if there’s a lot of session files to go through.

For one particular user, you’d have to add some code to your session handler:

 if ($_SESSION['username'] == 'user to delete') {
     session_destroy();
 }

PHP’s garbage collector isn’t controllable, so you can’t give it parameters such as “delete all sessions except for user X’s”. It looks strictly at the last-modified/last-accessed timestamps on the session files and compares that to the max_lifetime setting. It doesn’t actually process the session data.

More Related Contents:

  1. Undefined index $_POST
  2. PHP Sessions across sub domains
  3. When do I have to declare session_start();?
  4. CakePHP remember me with Auth
  5. PHP authentication with multiple domains and subdomains
  6. destroy session when broswer tab closed
  7. how can I print multiple services in this way
  8. How should I choose an authentication library for CodeIgniter? [closed]
  9. Using sessions & session variables in a PHP Login Script
  10. PHP Session data not being saved
  11. What do I need to store in the php session when user logged in?
  12. PHP session side-effect warning with global variables as a source of data
  13. PHP sessions default timeout [duplicate]
  14. How to change / Custom password field name for Laravel 4 and Laravel 5 user authentication [duplicate]
  15. What is the difference between Sessions and Cookies in PHP?
  16. PHP alternative to session_is_registered
  17. Logging In To Joomla 1.5 Using External Form (not within joomla folder, but on same server)
  18. how to pass value from one php page to another using session
  19. PHP – Secure member-only pages with a login system
  20. Prevent Browser’s Back Button Login After Logout in Laravel 5
  21. Is it secure to store a password in a session? [duplicate]
  22. Do AJAX requests retain PHP Session info?
  23. Undefined index with PHP sessions
  24. Submit Multiple Forms With One Button
  25. Laravel – How to get current user in AppServiceProvider
  26. PHP form token usage and handling
  27. Laravel Auth:attempt() will not persist login
  28. Reopening a session in PHP
  29. Extending session timeout in PHP via the .htaccess
  30. saving checkbox state on reload

Leave a Comment