session question

[micmac]

Hi Guys,
Having a few problems with sessions. For some reason on one computer it works and on another it doesn't...that is when i try to login.
When it doesn't work it stays on the form page upon submitting.
Does anyone have any advice or suggestions...do i need to use session_destroy????
This is the script for the form:

<FORM METHOD="POST" ACTION="validate.php">
<TABLE BORDER="0" WIDTH="350" CELLSPACING="0" BGCOLOR="#FF9900">
<TR>
<TD WIDTH="100%">
<TABLE BORDER="0" WIDTH="350" BGCOLOR="#003366" CELLSPACING="0" CELLPADDING="5">
<TR>
<TD WIDTH="50%" ALIGN="right"><FONT COLOR="#FFFFFF">Login</FONT></TD>
<TD WIDTH="50%"><INPUT NAME="userid" TYPE="text" id="userid" SIZE="31"></TD>
</TR>
<TR>
<TD WIDTH="50%" ALIGN="right"><FONT COLOR="#FFFFFF">Password</FONT></TD>
<TD WIDTH="50%"><INPUT TYPE="password" NAME="password" SIZE="31"></TD>
</TR>
<TR>
<TD WIDTH="100%" ALIGN="right" COLSPAN="2">
<P ALIGN="center"><INPUT TYPE="submit" VALUE=" Login "></TD>
</TR>
</TABLE>
</FORM>

The validate.php page looks like the following:

<?
session_start();

if ($userid && $password)
{
 // if the user has just tried to log in

 mysql_connect('localhost', 'user', 'pass');

 mysql_select_db("resinet");
 $query = "SELECT * FROM admin WHERE login_name='$userid' AND password='$password'";
 $result = mysql_query($query);
 if (mysql_num_rows($result) >0 )
 {
   // if they are in the database register the user id
   $user = mysql_fetch_array($result);
   session_register("valid_user");
   $valid_user = $user["member_id"]; 


 }
}

 if (session_is_registered("valid_user"))
 {
   // logged in successfully to membership area
   header ("Location: intranet.php"); 




 }
 else
 {
   if (isset($userid))
   {
     // if they've tried and failed to log in
	 header ("Location: warning.php");
   }
   else
   {
     // they have not tried to log in yet or have logged out
	header ("Location: warning.php");


   }

  }
?>

...and the intranet.php is:

<?
session_start();
//check session variable

 if (session_is_registered("valid_user"))
  {

?>

Contents of page here.....

<?
}
 else
  {
    // You are not logged in.
    //Only logged in members may see this page.    

    require("login.htm");
 }


?>

[jc94062]

If it works on one machine and not another there arn't many things it can be:

1. One machine is screwed up in some weird and wonderful way that makes it do strange things.

2. On the computer in which it doesn't work your using a different browser (like Netscape 4.7?)

Try echoing out various variables to see at which points its failing, but first, if you can, and if you are using different browsers see if thats a problem.

I know from using browser ranging from IE5/5.5/6, Netscape 4.7/6, Mozilla (Unknown), Konquerer (Unknown), and some other one I forget that things can go wrong on particular browsers.

Netscape can be very picky about HTML code for example...

Can't see anything majorly wrong with yours, tho this...

<TD WIDTH="100%" ALIGN="right" COLSPAN="2">
<P ALIGN="center"><INPUT TYPE="submit" VALUE=" Login "></TD>

isn't nice...
You don't end the p tag at all, and I can't see why you use align="right" on the table row then p align to center.

If there a URL for the page? I've only got IE6 access atm, but I can try it on that if you want and are using different browsers.
IE tends to guess on HTML stuff that isn't there, or isn't ended, which may or may not be a good thing I guess.

[bretticus]

Well, this is more of a question rather than an answer. Can you test session_is_registered immediately after session_register while the script is still processing? In other words, does session_is_registered attempt to grab the cookie with the sess_id to validate? And where the script hasn't finished executing, is that cookie even there yet? In the past I've used the same condition for writing the session variables as I have for redirection. Since the second script can "call" the cookie or write the session id to a querystring, the session is maintained and only one set of tests is required to redirect to the appropriate page. I shoudl just test it, but I would liek to know if you can actually test session_is_registered immediately after session_register???