actually what i said is partially correct:
this is my php code when i used session control:
<?php
session_start();
if ($userid && $password)
{
// if the user has just tried to log in
include("config.php");
include("functions.php");
// open database connection
$connection = mysql_connect($host, $user, $pass) or die ("Unable to connect!");
// select database
mysql_select_db($db) or die ("Unable to select database!");
$query = "select * from auth "
."where name='$userid' "
." and pass='$password'";
$result = mysql_query($query, $connection);
if (mysql_num_rows($result) >0 )
{
// if they are in the database register the user id
$valid_user = $userid;
session_register("valid_user");
}
}
if (session_is_registered("valid_user"))
{
and on my second page i used the if (session_is_registered("valid_user"))