[UPHPU] Session Buildup

[Jon Jensen]

I think the point that Jeff was making is that after he is done with the
session, e.g. the person logs out, he then destroys it. That *should*
immediately destroy the relevant session file on the server.

So in your logout script, call session_destroy().

Also, if you still have old session files floating around, look at changing
the default values for session.gc_probability, session.gc_divisor, and
session.gc_maxlifetime, which determine how/when garbage collection will
occur

http://us2.php.net/manual/en/ref.session.php#ini.session.gc-probability

Jon