Thanks for your help. I have already implemented a time out on the session, but was hoping there might be a way of explicitly destroying the session by perhaps capturing the URL in the address bar before the page unloads and comparing the domain name with that of my own site then firing some code to destroy the session if different. I know that still leaves the problem the users ability to disable javascript, but it would be interesting to know if...

I am not sure where to post this as it probably a combination of client and server script I am looking for.

Basically I am trying to find out how to destroy a PHP session when the user navigates away from my site.

Any help would be appreciated