I can get session_destroy() to work fine removing registered variables from the session file on the server. Thanks to the above tip. However after removing all variables from the session I'm still left with a 0 byte file on the server. Is this correct? Will they be cleaned up at garbage collection?