problem with session variable and url variable

[Lazarus]

code

<?php
session_start();

if (!isset($FF_login_failed) || $FF_login_failed != "0") {
  header ("Location: login.php");
}

IF u type "fil.php?FF_login_failed=0" in the url U will stay, but I don't want it to get it from the url, I should only use the session variable!!

how do I get around this??..

PLZ help me! 🙂

[keakathleen]

where do you register your session variable at? are you registering $FF_login_failed and setting it to some value on the login page?

[Weedpacket]

You'll find the session value in $SESSION['FF_login_failed'] and the URL value in $GET['FF_login_failed']. Use these arrays and you won't be at any risk of them getting mixed up with each other.

(If you're using a verion of PHP older than 4.1, use $HTTP_GET_VARS etc.)