bug #1763343 [session] Behavior with session.auto_start enabled

ChangeLog

@@ -28,6 +28,7 @@ $HeadURL: https://phpmyadmin.svn.sourceforge.net/svnroot/phpmyadmin/trunk/phpMyA
 - bug #1759194 [import] open_basedir warning
 - bug #1793948 [parser] ROW_FORMAT incorrectly parsed
 - undefined PMA_MYSQL_INT_VERSION when no default server is set 
+- bug #1763343 [session] Behavior with session.auto_start enabled 
 
 2.11.2.2 (2007-11-20)
 - bug #1835123 [security] fixed XSS vulnerability on login page, 

libraries/session.inc.php

@@ -19,12 +19,9 @@
 if (!@function_exists('session_name')) {
     PMA_fatalError('strCantLoad', 'session');
 } elseif (ini_get('session.auto_start') == true && session_name() != 'phpMyAdmin') {
-    $_SESSION = array();
-    if (isset($_COOKIE[session_name()])) {
-        PMA_removeCookie(session_name());
-    }
-    session_unset();
-    @session_destroy();
+    // Do not delete the existing session, it might be used by other 
+    // applications; instead just close it.
+    session_write_close();
 }
 
 // disable starting of sessions before all settings are done