Adding an entry to user "log" table when session expires automatically

[eluser]TheFuzzy0ne[/eluser]
Yes and no... Yes, it deletes expired sessions - no, it doesn't necessarily do it when they expire. There's an algorithm which decides the probability of whether or not to clear the expired sessions, which is run each time the session class is run, so expired sessions aren't cleared every single time the session class is loaded. You can change this by overriding the right method, but it will put more strain on your server, and still uses requests as the trigger. If no-one browses your site for a week, then the expired sessions have zero chance of being removed within that time frame, and only a 5% chance of being removed when triggered by a request.