problem with session

jiehuang001

I have a page Admin.php, at the top is the following code. it is supposed to direct the user to the Login.html page if he is not authorized first. However, when I type http://localhost/Admin.php, I can still view this page, not being directed to the login page instead. Please advise.

<?php
session_start();
if(!(session_is_registered('username'))){
header ("Location Login.html");
} else {
?>

ereptur

actually, what I found useful when I encountered this exact same problem was to first initialize session like this:

session_start();
$username = "joe";
session_register('username');
$_SESSION['username'] = $username;

then you can test for the session on your admin.php page using

if(isset($_SESSION['username']))

Then you would just followup with a test to see if that username is allowed to access admin functions