you should register your variables as $_SESSION['var']=$yourvar where var is the variable name and $yourvar is the username or password or what ever you using to authenticate users. They are trickey to use dending on your configuration. See php documentation it explains it pretty well.
