$this->session->sess_destroy(); didn't destroy all session?

[eluser]WanWizard[/eluser]
As I said, sess_destroy() doesn't empty the user_data array.

It's a 'bug/feature' that's been there since the beginning of time. If this is a problem for you, either report it to have it fixed, or extend the session class and erase it yourself.