DO you have a sessions table? If so, have a last_impression field (or similar) which stores a timestamp of when a page on the site was last accessed. If current time - timestamp is more than a certain time interval, delete it (the session). This means that your sessions need to access/get/set from the DB as opposed to using the cookie-based storage.
diafol
Rhod Gilbert Fan (ardav)
7,792 posts since Oct 2006
Reputation Points: 1,170
Solved Threads: 1,080