1.) So what is the best way to "register" session variables, then? Just assign values to the $_SESSION array?
2.) Also, is the $HTTP_SESSION_VARS array as secure as the $_SESSION array or having the variables automatically registered when session_start() is called (and thus overwriting any other value that the session might have had)?
3.) Lastly, do I have to call session_start before the $_SESSION or $HTTP_SESSION_VARS array will be available?