So i have this in all my pages...
<?php
session_start();
if (!isset($usr)) {
$logon_msg = "Your session has expired, please log back in";
echo "<SCRIPT>location.href='entrance.php?logon_msg=$logon_msg'</SCRIPT>";
}
?>
So... if $usr isn't set you have no session and you're booted. The code works cause if I try to just go to a page without loggin in i get booted... So we know this code works... the session just isn't being destroyed ever.
here's my php.ini for the session stuff
session.auto_start = 1
session.save_path = /windows/temp
session.cookie_lifetime = 0
session.gc_probability = 1
session.gc_divisor = 100
session.gc_maxlifetime = 126