Hi,

I'm creating a form that handles sensitive data which isn't to be stored on the server.

How can I ensure that the session files that are created, are deleted immediately after the form submission?

Should I be calling Session::destroy() or Session::clear_all()?

A couple of questions:

• * Are there any implications I should be aware of?
  
• * The user doesn't need to be logged in, but if they were logged in, would that cause them to be logged out if I called Session::destroy() or Session::clear_all()?
  
• * Is it possible to just clear the session variables related to the form's sensitive data?
  

Thanks very much.
VWD.

Forms only store the data in the session on validation failure. The data is then removed from the session as soon as the form has been displayed back to the user with their previous information. There is no need for you to be clearing the session yourself.

Thanks Simon - that's good to know. Thanks for your reply.

VWD