delete session when tab window closes

bikermike · November 21st, 2008, 06:41 AM

some one asked this question. "My page create session using userid when user login ,how can i clear session variables when user closes browser/windows using which he has logged." In IE there are tabs. Yes if the user closes the browser the session data is destroyed. and yes if he logs out. BUT, if he closes just the tab the site is on, the information is NOT destroyed. is there anyway to have the session time out or sense that the tab window it was in is now closed and destroy the session?

GreenCore · December 17th, 2008, 09:32 PM

Maybe this will help:

Source from:

http://www.experts-exchange.com/Prog..._23860371.html

HTML Code:

    <html>
        <head>
            <script type="text/javascript">
                flag=true;
                window.onbeforeunload = function(){if(flag)return "Warning you are still logged in, are you sure?";};
            </script>
        </head>
        <body>
            <a href="http://google.com" onclick="flag=false;">link test</a>
            <form onsubmit="flag=false;">
                <input type="submit"></input>
            </form>
        </body>
    </html>

Or Advanced:

if you use the Javascript HTTP Request with the previous source:
Examples

Then you can call the PHP page with:

PHP Code:


			
  session_destroy();

Example:

Warning on session_destroy()

philip_cole · February 21st, 2009, 05:02 PM

GreenCore's example are correct and can be used to either keep the user on the page or to force the session to end.
It all comes down to being able to send a request for a logout page to the server so that it can kill the session. However you cannot rely on any solution successfully ending the session, as they generally use JavaScript, which can be turned off, or the user's connection may die etc....

In terms of putting a timeout on the session, PHP by default will do this anyway, as it uses cookies (be it client or server) to control user's sessions, and these have an expiry date of a specified time after the user's last activity on the site - I believe the default is 24 minutes. It is possible to control the timeout length.
This page and the links on it may help:
http://www.webmasterworld.com/forum88/12812.htm

Hope this helps
Phil