[Solved] Expire Session Question

You solved one problem, but you don't know that you have another one.

random_string() is not random; the manual itself says NOT to use the string helper for anything security-sensitive.