Destroying sessions in PHP - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is the purpose of session_destroy() in PHP?

session_destroy() ends the current session and deletes all data associated with it on the server.

beginner

Which PHP function removes all session variables but does not destroy the session itself?

session_unset() clears all session variables but keeps the session active.

beginner

Why should you call session_start() before destroying a session?

You must call session_start() to access the current session before you can destroy it.

intermediate

How do you delete the session cookie in PHP when destroying a session?

Use setcookie() with the session cookie name, an empty value, and a past expiration time.

intermediate

What is the correct order to fully destroy a PHP session?

1. Call session_start()
2. Clear session variables with $_SESSION = [] or session_unset()
3. Delete the session cookie with setcookie()
4. Call session_destroy()

What does session_destroy() do in PHP?

A Clears session variables but keeps session active

B Deletes all session data on the server

C Starts a new session

D Deletes the session cookie only

session_destroy() deletes all session data stored on the server for the current session.

Which function clears all session variables but does not destroy the session?

A session_unset()

B session_destroy()

C session_start()

D session_regenerate_id()

session_unset() removes all session variables but keeps the session itself active.

Before calling session_destroy(), what must you do?

A Call <code>session_start()</code>

B Call <code>session_unset()</code>

C Delete the session cookie

D Nothing, just call <code>session_destroy()</code>

You must call session_start() to access the session before destroying it.

How do you delete the session cookie in PHP?

A Call <code>session_destroy()</code>

B Call <code>session_start()</code>

C Set cookie with empty value and past expiration time

D Call <code>session_unset()</code>

Use setcookie() with the session cookie name, empty value, and expiration time in the past to delete it.

What is the correct sequence to fully destroy a PHP session?

A session_unset() → session_destroy() → session_start()

B session_destroy() → session_start() → delete cookie

C delete cookie → session_destroy() → session_start()

D session_start() → session_unset() → delete cookie → session_destroy()

First start the session, then clear variables, delete the cookie, and finally destroy the session.

Explain the steps needed to completely destroy a PHP session and why each step is important.

Think about both server data and client cookie.

What is the difference between session_unset() and session_destroy() in PHP?

One clears variables, the other ends the session.