Data In Session

When user login in my site I set some variables in session ($this->setState()). How I can update this data or logout user if I, for example, ban user?

In your base Controller (protected/components/Controller.php), create a beforeAction() method that checks the status of your user in the DB. If user is banned, logout.