Hi,

Session_destroy() does not seem to have any effect. 
The session file (sess_*) is not deleted, its content unchanged, and the next call to session_register() will retrieve previous values.

I am running the test under Win98SE (Apache 1.3.11)  and NT4SP6 (IIS 4.0),
my php.ini settings (register_globals, track_vars, session.*) are the default ones. 

I have included here three short php4 script which illustrate the problem
----------
<?php
session_register('my_string');
$my_string = 'Foo Bar';
echo "Part 1: ", $my_string;
?>
----------
<?php
session_register('my_string');
echo "Part 2: ", $my_string;
?>
----------
<?php
session_start();
$result = session_destroy();
session_register('my_string');
echo "Part 3: ", $my_string, "-", $result;
?>
----------

I noticed that some other folks have reported the same bug, 
but I am sending this to make it clear that it also happened on Win9x
(not just NT).

Thanks