ok so I re-read the manual and it makes more sense today. Session_destroy() get's rid of data associated with the session, but not the session.
My scripts check for the presence of $PHPSESSID, and if it exists they don't set any variables(this way variables already set don't get accidentally cleared). So if someone logs out of my site (and I perform a destroy) and then they log back in, it shows the same session id, but no variables. Which as you may guess isn't terribly handy.
Anybody know how I could get around this?
-- Nick Gushlow