Register Globals and sessions

Archbob

For something like this:

if (isset($_SESSION['username']))

nnichols

No. register globals allows you to access the session vars directly. To access session vars via the super global $_SESSION array you do not need (or even want) register_globals to be On

Hope this helps 😉

Mordecai

register_globals on: $username or $SESSION["username"]
register_globals off: $SESSION["username"]

See the difference?

Archbob

hmm, I released a script GPL and I have

session_start and session_register("username")

and then on every other page at the top I have if(isset($_SESSION["username"]) to display if their logged in. It works for me but some people are complaining that it doesn't work.

Weedpacket

If you're going to use session_register('username') and $username, don't use $_SESSION['username'] as well. And vice versa. The manual states as much. Repeatedly.

Archbob

What should I do then?
I'm a bit confused over this.

nnichols

If you want to access your sess vars through the superglobal array you must register them like -

$_SESSION['username'] = 'some value';

and retrieve the value using -

$_SESSION['username'].

If you want to use the other method you must have regsiter_globals On

Set it like -

$username = 'some value';
session_register('username');

and retrieve using the global var -

$username

Hope this helps 😉

paul088

I thought you should use $HTTP_SESSION_VARS[username] instead of $username if you use session_register ['username']. Very safe to use $SESSION[username] when you do $SESSION[username]=$username;

Remember you need to start a session to use the variables stored in the session on every page.