> My question is: > Is there a way to close this hole and let the session expire as soon as only > the active window > is closed?
Nope, that's how browsers work. Your only real way to fix it would be to expire a session after a certain amount of inactivity. That's what the PHP sessions do by default - 24 minutes of inactivity and the session data is expired. There is no way to detect a user closing one window of a browser session. -Rasmus -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
