When using the default session handler files for using sessions, PHP stores session information on the harddrive of the webserver. When are those session files cleaned up?
When the function session_start() is called, PHP will sometimes iterate over all session files, and delete them if they exceeded the session timeout limit.
Correct:
When the function session_start() is called, PHP will sometimes iterate over all session files, and delete them if they exceeded the session timeout limit.