disappearing session variables

roadrash

I have noticed that some of my active session variables are being switched with other variables from past sessions. For instance:

-person A logs in to the site
I perform a typical check of authentication.
username and membernum are registered as session variables.

If person A decides to refresh the page, the session variables change from that of person A to a different member's information. I am not sure if these are old sessions?or what?

It seems to happen on pages where I use _blank. Has anyone else ever had this problem? I have researched different headers and other methods of correcting this problem.

Any suggestions? Any help is greatly appreciated. I would be pulling my hair out, if I was not bald.

brad_fears

I've seen this problem with some of my applications before. Not necessarily related to using a blank reference, but similar problems. What set of commands are you using to unregister the session variables? I've had trouble where I had to use both session_unregister("userid") as well as unset($SESSION['userid']) just for backward compatibility.

Test the session variables for value after you unregister them. That might lead to the problem.

--Brad Fears

Weedpacket

Prior to v4.3 $SESSION was buggy in that unset($SESSION['var']) did not work; $_SESSION['var']=null was needed instead.

Using session_register() and $_SESSION together is a sure way to get horribly confused, with at least three different variables floating around for each session item.

roadrash

Thanks weedpacket and brad_fears. I found the problem. The company that I use to host my site has register_globals = on. I test my site with register_globals = off. It seems to work fine now.
Thanks again