This is how debian Woody (and all sane systems) clean up PHP disk based (the default) sessions: Every x (default: 1000) requests, PHP will delete all outdated sessions. This is how Debian Sarge does it: Every half hour (at 9…