Doo::session's destroy() isn't complete

[roman]

It merely calls session_destroy(), as far as core PHP calls are concerned. According to http://php.net/manual/en/function.session-destroy.php,

session_destroy() destroys all of the data associated with the current session. It does not unset any of the global variables associated with the session, or unset the session cookie. To use the session variables again, session_start() has to be called.

In order to kill the session altogether, like to log the user out, the session id must also be unset. If a cookie is used to propagate the session id (default behavior), then the session cookie must be deleted. setcookie() may be used for that.

I would like destroy() to do the whole thing. Please extend it. If somebody needs the current version, then both behaviors could be kept, one of them could be chosen by an argument to the method.

[roman]

Any reaction from the contributors/committers?

[RichardM]

Hi,

Sorry, simply not had time to look into this one. Any chance you want to post up some code to sort this issue and I'll be happy to check it over and implement it?


Richard

[roman]

Hi,

OK, I will do that, Richard. This isn't an urgent issue, so I will do this a little later, when my urgent tasks are complete.

Thanks