Comments by JakeFront (Top 1 by date)

Yeah, sorry. i've been pressing the wrong button.
With regards to the cookie. This is all new to me about cookies and sessions. The security audit says we need to mitigate the possibility of reusing the old expired session ID in a new request. I've looked around and found the code above from a number of sites, but when this is put into the firefox, using cookie manager with the old session id, it doesn't redirect to the login page on a refresh.
I was hoping someone may have come across the same sort of issue.