session_start jacked up?

crouchl

Okay, so I have a .php that has session_start() on line 1...

Isn't this function supposed to look for a session, and if it doesn't find one, it CREATES one? because on my server, it isn't creating...it just gives me...

Warning: open(C:\PHP\sessiondata\sess_b9e2a651c3948086b1b1e7bca33d332f, O_RDWR) failed: No such file or directory

I'm almost positive there is something I need to set in my php.ini file, but I looked through there and couldn't figure out what it was...

TIA...

flameche

it's called session.save_path in your php.ini make sure the process that php runs under has read and write permissions on that folder.

crouchl

okay, so how do I verify that my php process has permissions to the specified directory? (I'm on W2k, not Linux)

Thanks...

crouchl

Okay, I got that fixed (that directory didn't exist, I just created it)...

But now, I want my php page to check for a session variable and if the session variable is not equal to a specified value, it should display a message...like this:

<?
session_start();
$admin = $HTTP_SESSION_VARS['admin'];
if($admin <> "loggedIn"){
echo "You are not logged in as administrator<br><a href=\"login.php\">Click here</a> to log in.";
} else {
// display some other stuff if it is there
}
?>

But with this, I get:

Notice: Undefined index: admin // on line 3

So, it writes that notice, and also does that echo line...is there a way I can have it ignore that notice?

Thanks.

flameche

W2K or linux, that doesn't mather, don't you know that W2k process also run as a certain user? Check at your services list, there you can change it to whatever user you want. if you're using M$ IIS, php will run as the same user as IIS. Apache has a configuration entry for specifying the user and the group but I never tested those on Winshaft.

crouchl

I already got that part of the problem fixed, flameche. Thanks though...any ideas on the new problem? (See my last post before this one...)

flameche

sure, you can use:
if( isset( $SESSION[ 'admin' ] ) && $SESSION[ 'admin' ] == 'logedIn' ) {
// do something
}

jonsof

Could someone use this checking of session value in order to authenticate http?