I close browser completely and re-open - I'm still logged in! Why?

[sfullman]

I have created a login system. I notice that when I close the browser completely and come back, I'm still logged in. This is not true if I click "log out" which manually destroys the session cookie and it's lights out.

Come to think of it since the cookie is not destroyed, normally, when a browser closes it makes sense that you'd still be logged in when closing a window, but other login systems I've seen aren't like this.

Is there any unique key which a browser presents to the server which would change each time a new thread of the browser is open? I also say this because a feature I used to have with my login system (which is gone years ago sorry) was that I could open say IE 2 times separately on two separate threads, and have two separate sessions.

Thanks,
Samuel

[_theworks]

just make it timeout after like 300 seconds of no activity.

[thorpe]

how would php know youve closed the browser? php runs on the server.

[Installer]

True, PHP doesn't know when the browser is closed, but it does know whether or not a cookie has been received.

Did you set the setcookie() expire parameter to 0? Supposedly the cookie will then be destroyed when the browser closes.