session security

session_start();

if ( isset($_SESSION['ip']) ) {
	if ( $_SESSION['ip'] != $_SERVER['REMOTE_ADDR'] ) {
		session_destroy(); session_start(); session_regenerate_id(); 
	}

} else {
	$_SESSION['ip'] = $_SERVER['REMOTE_ADDR'];
}


if ( isset($_GET['logout']) ) { 
	session_destroy(); session_start(); session_regenerate_id(); 
}