3

First of all I should remind you I have read this question , I am using Codeigniter 3 . I want to destroy session with browser closing like PHP session ! I have read somethings about using ajax like this : 

var unloadHandler = function(e){
        //here ajax request to close session
  };
window.unload = unloadHandler;

and .... But I dont want to make myself dependent to js for destroy session with browser closing . this is my config.php

$config['sess_driver'] = 'files';
$config['sess_cookie_name'] = 'soheil_blog_name';

$config['sess_expiration'] = 7200;
$config['sess_save_path'] = NULL;
$config['sess_match_ip'] = FALSE;
$config['sess_time_to_update'] = 300;
$config['sess_regenerate_destroy'] = FALSE;
Community
  • 1
  • 1
SoheilYou
  • 907
  • 5
  • 23
  • 43

1 Answers1

5

You just have to set 'sess_expiration' to 0, as described in the manual and in the config.php comments.

Note: Technically, you can't really destroy the session when the browser is closed. You can only tell the browser to discard the session cookie after it is closed, but the session itself is still usable on the server-side (i.e. if you are the victim of a MITM attack and somebody stole the session ID).
The session is actually deleted later by the garbage collector.

Narf
  • 14,600
  • 3
  • 37
  • 66
  • Keep in mind that even with `sess_expiration` set to 0, if the user is using the browser setting of 'Continue where you left off', the browser won't even remove the cookie. So, it isn't that Codeigniter is doing something wrong, it is just in certain scenarios, the browser itself can cause this feature not to work as expected. This is discussed further in this question: http://stackoverflow.com/questions/10617954/chrome-doesnt-delete-session-cookies – justanotherprogrammer Mar 31 '16 at 14:37