Session doesn't end when browser window is closed

A session cookie is dropped by the browser based on how you set it's expires / max-age value.
In CodeIgniter this is set using $config['sess_expiration'] in the config.php file.

From the config.php file.
| 'sess_expiration'
|
| The number of SECONDS you want the session to last.
| Setting to 0 (zero) means expire when the browser is closed.

Therefore unless you manually "dump" the session it will be valid until the expiration at which time the browser will delete the cookie.

Since HTTP is stateless you actually have no idea if a user has "left" your web site (unless your doing some kind of ajax hacks or something).

https://en.wikipedia.org/wiki/Stateless_protocol

Don Myers

https://github.com/ProjectOrangeBox / https://github.com/dmyers2004