New Session Problem! :(

[Mark]

now i have the login working, but i found out that if i type in any name and click login, it will say 'You have entered an incorrect username/password', but... my problem is, it still creates a session for that name i put in, then, i type members.php into the url and.. it lets me in.. how can i fix this?

[bretticus]

Don't set any session variables unless the username password combo pass your test (some code is posted elsewhere I assume?)

Just use session_start() and disregard the session_register() function all together as using $SESSION['yourvar'] is more secure anyway. Test for $SESSION['yourvar'] as well in your members.php script also.

[Mark]

thanks! but i figured it out! i forgot to UNREGISTER THE SESSIONS IF IT INCORRECT, i'm a moron! lol

[planetsim]

like bretticus said try not to register a session unless everything is clear that they are a member and can login..

Otherwise things like this will pop up.. and even worse session hi jacking can or could occur