title: After password reset remove all session cookies for that user
body: <p>I'm using <a href="https://github.com/panique/php-login-advanced" rel="nofollow">https://github.com/panique/php-login-advanced</a> login script, also there is a <code>NodeJS</code> server which authenticates users by their <code>session cookies</code>. The problem is when the user resets his password, he's still able to authenticate with his old session cookie. My goal is to remove all cookies for a user that reseted his password, so he will not be able to re-authenticate with his old session cookie. Already tried with php script that is searching for all sessions in <code>/var/lib/php5/*</code> and deletes them. All was fine while running that script under 'root', but this is not an option and apache user don't have privileges to read this folder. I'm looking for a better solution than just give read/write privileges to that folder.</p>