i use http login using header() (apache directives).
but how can we logout a user sending some headers, may be using header()? ... without forcing the user to shut the browser of course.
Daarius...
read : http://www.w3.org/Protocols/rfc2068/rfc2068 may be you will find something under 4.5
bye, niko