Session problems

[Mark]

first off..

1) they login (login.php)
2) the login form sends the information to validate.php
3) validate.php validates them and checks to see if it is correct.
4) if its correct it gives them a link to the members page(members.php)
5)on the members page i have it include verifylogin.php

<?php
	session_start();
	if(empty($_SESSION['username'])) {
		die('
An error has ocurred. It may be that you have not logged in, or that
your session has expired.  Please try <a href="/">logging in</a> again or contact the 
<a href="mailto:[e-mail]">system administrator</a>');
	}
?>

when i do this... even when they login correctly, it says they arent logged in.. i need help :mad:

[Weedpacket]

That bit looks fine; I guess $_SESSION['username'] isn't getting set properly.

[Mark]

well heres the validate.php

<?php
	session_start();
	$dbuser = 'dbusernamehere';
	$dbpass = 'dbpasswordhere';
	$username = $_POST['username'];
	$passwd = $_POST['passwd'];

//connect to the DB and select the database
$connection = mysql_connect('localhost', $dbuser, $dbpass) or die(mysql_error());
mysql_select_db('biohazard_login', $connection) or die(mysql_error());

//set up the query
$query = "SELECT * FROM biohazard_users 
		WHERE username=\"$username\" and passwd=\"$passwd\"";

//run the query and get the number of affected rows
$result = mysql_query($query, $connection) or die('error making query');
$affected_rows = mysql_num_rows($result);

//if there's exactly one result, the user is validated. Otherwise, he's invalid
if($affected_rows == 1) {
print "Thank your for logging in, $username,Please continue into the <a href=\"members.php\">members area</a>";
}
else {
	print 'Sorry, you seem to have entered an incorrect Username/Password.';
}
?>

[Trygve_Grimnes]

Well, the problem here mate, as far as I can figure out, is that you aint passing the session ID along to the next page.

[scnjl]

🆒

[Mark]

😕

[benbox]

session_register("var") ;

(no $ on the var name)

[Mark]

it would be like this?... 😕

<?php
    session_start();


session_register("anyname") ;  //Register Session


$dbuser = 'dbusernamehere';
$dbpass = 'dbpasswordhere';
$username = $_POST['username'];
$passwd = $_POST['passwd'];

//connect to the DB and select the database
$connection = mysql_connect('localhost', $dbuser, $dbpass) or die(mysql_error());
mysql_select_db('biohazard_login', $connection) or die(mysql_error());

//set up the query
$query = "SELECT * FROM biohazard_users 
        WHERE username=\"$username\" and passwd=\"$passwd\"";

//run the query and get the number of affected rows
$result = mysql_query($query, $connection) or die('error making query');
$affected_rows = mysql_num_rows($result);

//if there's exactly one result, the user is validated. Otherwise, he's invalid
if($affected_rows == 1) {
print "Thank your for logging in, $username,Please continue into the <a href=\"members.php\">members area</a>";
}
else {
    print 'Sorry, you seem to have entered an incorrect Username/Password.';
}
?>

like that? 🙁 sorry i dont know much about sessions.

[Mark]

** plz 🙁 i need help

[Mark]

YAY I FIGURED IT OUT, thanks for the help everybody! 😃 😃 😃 😃

[Rodders]

Can you let me know how you solved this problem? It is very similar to what I have asked in the General forum.

[milind24]

Hello ,

$SESSION_NAME = "myname";
session_name($SESSION_NAME); 
session_start();

if($HTTP_SESSION_VARS["myname"])
{
    header("Location: ../utai/jobconnection/index.php");
             }

that means use session name what you started or rgistered on prevous page , give that sessioname so , session variable get correct values.

Milind Pingale