Jump to content

session_start() Help...


savagenoob

Recommended Posts

I have a login script that sets all my $_SESSION[] variables, it was working, now I'm redesigning, and now its not working. I can echo the variables on this page, but when it redirects to dashboard.php and I do a session_start(), nothing. It's driving me nuts.

<?php
require_once ('../includes/config.php');
require_once ('../includes/connect.php');

function clean($str) {
	$str = @trim($str);
	if(get_magic_quotes_gpc()) {
		$str = stripslashes($str);
	}
	return mysql_real_escape_string($str);
}

//Sanitize the POST values
$login = clean($_POST['login']);
$password = clean($_POST['password']);

//Input Validations
if($login == '') {
	$errmsg_arr[] = 'Login ID missing';
	$errflag = true;
}
if($password == '') {
	$errmsg_arr[] = 'Password missing';
	$errflag = true;
}

//If there are input validations, redirect back to the login form
if($errflag) {
	$_SESSION['ERRMSG_ARR'] = $errmsg_arr;
	session_write_close();
	header("location: ../../index.html");
	exit();
}

//Create query
$qry="SELECT * FROM members WHERE login='$login' AND passwd='".md5($_POST['password'])."'";
$result=mysql_query($qry);

//Check whether the query was successful or not
if($result) {
	if(mysql_num_rows($result) == 1) {
		//Login Successful
		session_regenerate_id();
		$member = mysql_fetch_assoc($result);
		$_SESSION['MEMBERID'] = $member['member_id'];
		$_SESSION['AGENTNAME'] = $member['firstname'] . " " . $member['lastname'];
		$_SESSION['OFFICE'] = $member['office'];
		$_SESSION['AGENCY'] = $member['agency'];
		$_SESSION['LOGIN'] = $member['login'];
		$_SESSION['EMAIL'] = $member['email'];
		$_SESSION['USERLEVEL'] = $member['level'];
		$_SESSION['EMPID']= $member['empid'];
		$_SESSION['LICENSE'] = $member['license'];
		session_write_close();
		header("location: ../dashboard.php");
		exit();
	}else {
		//Login failed
		header("location: ../../index.html");
		exit();
	}
}else {
	die("Query failed");
}
?>

Link to comment
Share on other sites

I don't see a session_start() anywhere in the posted code, so it will be a little hard for $_SESSION variables to actually be session variables. Without a functioning session_start(), you can set variables named $_SESSION and echo them on the page because they are just regular array variables.

Link to comment
Share on other sites

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.