Session variables parsed from forms...

[stevieb]

Hi Everyone,

I'm having some issues getting session variables from a form. Heres the run down:

<//-- form section -->
<?
session_start();
session_register("name");

print "(form content)<input type=text name=name";
...(rest of html)

?>

<//-- Process Section -->
<?
session_start();
session_register("name");
print "$name";
?>

I get no output. It kinda makes sense, but i need a way around it. Anyone got any ideas?

Cheers,

Steve

[Anon]

It looks like the "form section" and "process section" are separate pages.

When you do a "session_start()", any session vars are dumped into the global space. So, if you re-register 'name' you are probably writing over the top of the previously declared 'name'. Try "session_start()" on the process page without the "session_register()".

Also, it might be a good idea to use "$HTTP_SESSION_VARS[name]" so that a hacker doesn't try and insert 'name' as a GET or POST variable.