Hi,
I've installed FUDForum (sorry this is an old version) 2.2.3 some times ago and noticed that the sessions in the ses tables didn't seem to be removed properly.
After a look at the code in cookies.inc.t I found the following st
atement (this is the same in the latest version):
function clear_old_sessions()
{
q("DELETE FROM {SQL_TABLE_PREFIX}ses WHERE time_sec<".($tm_sample-$GLOBALS['COOKIE_TIMEOUT'])." OR (time_sec<".(__request_timestamp__-$GLOBALS['SESSION_TIMEOUT']).&qu ot; AND sys_id!=0)");
}
Grepping through the code, I couldn't find the $tm_sample variable definition anywhere, thus the sessions are removed only if there is a SESSION_TIMEOUT (and sys_id!=0), but never when the cookie reaches its timeout.
So I think this is a bug...
I hope this will help you chasing the bug !
Masterzen