Session Question...

[Inkybro]

Okay, this is really odd... here's the deal:

I decided to use sessions on my site for our log-in system but it didn't work.

What I did:

Basically I changed the loginprocess.php code around to set sessions and then uncluded memberarea.php if everythign matched. Now, obviously I oculdn't just include loginprocess.php or it would include memberarea.php so what I did is just did the same code without include("memberarea.php"); in it. Now just to test I did this to one page, I got something about a cache error - session already set or something, then I got Bad Username/password.

What I want:

Basically I want someone to help me get my log-in system set on sessions instead of the url dealy (check it out, login in as user: phpb, password: super at http://www.wizardduels.com/login.php) for many reasons. If you have any ideas or would like to help you could reply here or I have the messengers listed below.

You can contact me via:

AIM: WizardDuelsHelp
MSN: [e-mail]
Yahoo: wizfen
ICQ: 215794944

[trooper]

Ok what you need to do is the following

Once someone log in you need to goto your db and verify that the person is valid (by doing a user/pwd check) if they are then you need to set a session with some information about the user (name / email etc you). If you also store the session id number (session_id) then it will also help you.

You can store that session data as a file (cookie) or stick it into a db up to you

Then on every page you will need to check to see if a valid session is set (if you've stored the session id in a dbthen you could simply check the db to see if the session id being passed is in the db). If it is then they have logged in - if not then redirect them back to the login page. Be aware thought that this will prevent people from bookmarking a page that is in the membership area as they will need to log in every time.

HTH

GM