Session Assistance - Passing session data to other pages

nigel_belanger

Currently, IF a user logs in to my website, they are assigned session data via this code:

global $userid, $sess_id, $user_sid;
$userid=mysql_result($result,0,UserID);

// Initialize the Session Data ************************

$user_sid = session_id();
session_name("CSID");
session_start();
$sess_id = "$user_id";
session_register('userid');
session_register('sess_id');

THEN after this data has been stored or when the main page is loaded, this snippet of code is present at the TOP of the page:

session_name("CSID");
session_start();

For some reason, when I click on another page link the session data isn't passed.

My site is structured whereas the main page (index.php) includes other pages - but the important thing to remember is that the index.php is called for each page and link as a primary template. I use tables within index.php to pull in other pages in.

Any idea what I'm doing wrong? I though about storing the sessionid (SID) in the user database and then comparing them when the page is reloaded, but I'm having trouble assigning a variable to the session_id(); function.

Any suggestions?

planetsim

You must have session_start(); before you tell the session what to do..

Weedpacket

Well, you do have to give the session name before you start it - otherwise the sessioning system won't know which session to start...

sgarcia

Originally posted by Weedpacket
Well, you do have to give the session name before you start it - otherwise the sessioning system won't know which session to start...

You can't assign a session ID before you start the session and expect it to remain valid.

In other words,

session_name("CSID");
session_start();
$user_id = session_id();
$sess_id = "$user_id";

The session_id() function has to come after session_start().

Weedpacket

I didn't say session id, I said session name ... I said that in case nigel_belanger mistook planetsim's comment and moved the session_name() to after the session_start().

nigel_belanger

Ok, I added this to the beginning of the page (after authentication):

session_name("CSID");
session_start();
session_id($user_sid);

This remains when the user login routine is envoked:

global $userid, $sess_id, $user_sid;
// Initialize the Session Data ***********************
session_name("CSID");
session_start();
$user_sid = uniqid("");
session_id($user_sid);
$sess_id = $user_id;
session_register('userid');
session_register('sess_id');

How does this look. It seems to be working a bit better - still a lil' hoeky - but working better...

thoughts?

nigel_belanger

Odd, now i'm getting the following error:

Warning: Failed to write session data (files). Please verify that the current setting of session.save_path is correct (/tmp) in Unknown on line 0

Running Win2k - settings should be correct and permissions are set correctly. ((The errors shown above are the same, but from a unix system)

Sessioning is harder than I thought...

Weedpacket

Check the setting you've got for session.save_path in php.ini; it's obviously wrong.

Also, it's a lot easier to give up on session_register() - especially if you go around using it after using the variables you're trying to session. Just drop session_register() and access session data via the $_SESSION[] array instead. Things get a lot simpler then.

I mean, what are you actually trying to achieve?

session_name('CSID');
session_start();

$_SESSION['userid'] = mysql_result($result,0,UserID); (assuming the existece of a result has been confirmed).