Purge expired sessions

login.php

@@ -1,8 +1,5 @@
 <?php
 session_start();
-// purge sessions older than 2 days
-session_gc();
-session_destroy();
 
 $docroot = $docroot ?? $_SERVER['DOCUMENT_ROOT'] ?: '/usr/local/emhttp';
 require_once "$docroot/webGui/include/Helpers.php";

plugins/dynamix/include/login.php

@@ -70,6 +70,9 @@ if (!empty($_POST['username']) && !empty($_POST['password'])) {
             if ($output !== false) {
                 $strCredentials = explode(":", $output);
                 if (password_verify($_POST['password'], $strCredentials[1])) {
+                    // purge sessions older than 2 days
+                    session_gc();
+                    session_destroy();
                     // Successful login, start session
                     @unlink($failfile);
                     session_start();