Re: [PHPLIB] How to clean up session when deleting user? From: Alexander Aulbach (ssilk <email protected>)
Date: 03/29/00

On Tue, 28 Mar 2000, Gary Bickford wrote:

}I have found that just deleting a user from auth_user may not be enough
}for my application. I'm using default auth ($auth->nobody=true;).
} However if I (separately) use a mysql query to delete a user who is
}already logged in, they can still act as if they were there. For
}instance, $auth->auth["uname"] is still the same.
}
}What would be the most appropriate way to sense that the user has been
}'de-authorized' or deleted in the middle of a session or to force their
}session to no longer be valid? I suppose I could use auth_user.user_id
}and delete the session explicitly, but I thought there might be a more
}graceful way.

That's cause the session, the user got, when he logged is already active
and valid. $sess->delete() will help. 

-- 

SSilk - Alexander Aulbach - Herbipolis/Frankonia Minoris - (0931)22032

-
PHP3 Base Library Mailing List. Send messages to <phplib <email protected>>.
To unsubscribe, send "unsubscribe" to <phplib-request <email protected>> in
the body, not the subject, of your message.