session variables changing

[drr37]

Anybody know why a session variable just might change automatically? I'm doing a project management site and when a logged in user goes into a certain part of the site their personal information is brought up automatically along with the projects they are managing. Sometimes somebody else's information comes up and they are that person from then on if they do not log out and log in again. The session variable for their $mngID seems to be changing but I can't figure out why. This may happen one in every 15 to 20 times someone accesses the site. It would be a little difficult to include the code here, since I wouldn't even know which pages to put on, so I'm basically asking for some general ideas.

thanks

[bladx]

What version of PHP are you using?

[hfuecks]

That sounds like an application bug at a deeper level.

Make sure you're developing with register_globals = Off (php.ini) so there's no other $mngID variable coming from somewhere. Also eliminate any classes / functions where you've used the keyword "global"

That's a general answer. More I can't say without seeing code / application design.

[torrent]

Make sure if a user is logging out that as well as destroying the session you also unset() the session vars which are being used in test expressions.