3.17.4. user_session_destroy

Allow modules to override Phorum's session destroy management or to even fully omit destroying a session (for example useful if the hook ??? is used to inherit an external session from some 3rd party application).

Call time:

Just before Phorum runs its own session destroy code in the user API function phorum_api_user_session_destroy().

Hook input:

The session type for which a session must be destroyed. This can be either PHORUM_FORUM_SESSION or PHORUM_ADMIN_SESSION.

Hook output:

Same as input if Phorum has to run its standard session destroy code or NULL if that code should be fully skipped.

Example code:

See the ??? hook for an example of how to let Phorum setup the PHP session that is destroyed in this example hook.

function phorum_mod_foo_user_session_destroy($type)
{
    // Let Phorum handle destroying of admin sessions on its own.
    if ($type == PHORUM_ADMIN_SESSION) return $type;

    // Override the session handling for front end forum sessions.
    // We could for example have stored the session in a standard
    // PHP session. First, we start a PHP session if that was
    // not done yet.
    if (!session_id()) session_start();

    // After starting the PHP session, we can clear the session
    // data for the Phorum user. In the user_session_create hook
    // example code, we stored the user_id for the active user
    // in the session. Here we clear that data. We could also
    // have destroyed the full PHP session, but in that case we
    // would risk destroying session data that was setup by
    // other PHP scripts.
    unset($_SESSION['phorum_user_id']);

    // Tell Phorum not to run its own session destroy code.
    return NULL;
}