I'm using htpasswd of apache to authencate the username/password to access my site.
But how do I include a "logout" function.
I have had the experience of doing this by session and it's very easy to do. How about this HTTP AUTH?
The browser will continue to send the u/p with every request until it gets a new request for password (401 response code) or the browser is closed. I'm not even sure it stops when it gets a new password request.
php.net has some discussion of this in one of the manual pages.