OWASP/phpsec — pull request #81 by mebjas (2013-10-30 16:40:22+00:00)
Title: code to delete expired session entries from database

as mentioned by Abbas the code checks for last time expired session entries were deleted and if its greater than a threshold time which I set as 60 minutes, and if it exceeds a single SQL query deletes all those entries in db which has expired.