in reply to CGI::Session->delete()

CGI::Session files are only MARKED for deletion with delete(). They are actually deleted on next access. Thus, if that session ID gets lost somehow, it will never get deleted.

There was a previous discussion similar to this not too long ago.

I created a snippet to delete all expired sessions.

Update: I took a look at CGI::Session again. Apparently flush() is called in the destructor, which calls remove() if the session is to be deleted. Hrmm, odd. Maybe try calling flush() explicitly after the delete?

HTH

--
"To err is human, but to really foul things up you need a computer." --Paul Ehrlich

Replies are listed 'Best First'.
Re: Re: CGI::Session->delete()
by Anonymous Monk on Oct 22, 2003 at 19:33 UTC
    Here's the snippet:
    my $session = new CGI::Session(undef, $query,{Directory=>"/tmp/data"})
+;

$cookie = $query->cookie(CGISESSID => $session->id );
print $query->header(-cookie=>$cookie);

print $query->start_html( "Blah Blah" );

$session->delete( );
$session->flush();

    [download]

    As you can see, I did try calling flush, but it doesn't help. I read your snippet (before posting no less 8-), but I thought that code was for maintenance of sessions that were abandoned.

    The CGI::Session::File.pm code does an unlink on the file, but I haven't tried tracing the excetuion. Thanks again.

[reply]
[d/l]

      True, it is for expired sessions rather than explicitly deleted sessions but here's a one line change to do both:

      Change

      if ( time() >= $D->{ _SESSION_ETIME } + $D->{ _SESSION_ATIME } ) {

      [download]

      To

      if ( time() >= $D->{ _SESSION_ETIME } + $D->{ _SESSION_ATIME } or $D->
+{ _STATUS } == 2 ) {

      [download]

      Warning: untested.

      --
      "To err is human, but to really foul things up you need a computer." --Paul Ehrlich

[reply]
[d/l]
[select]
        Thanks again,
        Sadly it was a Code 18 (the problem was 18 inches from the computer screen - better to admit it than confuse others). The script that deleted the session was called from another script that opened the session object. I'm thinking that when the inner script did the delete the OS prevented the unlink becase the outer script still had an open object.
        Either way, it works now.
        Regards.
[reply]

In Section Seekers of Perl Wisdom