Unfortunately I don't get any error messages.
Take a look at the script. When sessions work, the script executes perfectly, but when the session doesn't register, the script loops and tries to go to the same page at the start of every page, and since every page includes the session.php file nothing happens.
Any ideas?
<?
session_start();
if (!isset($SESSION["loggedOn"])) {
if (isset($SESSION["redirectPage"])) {
if ($_SERVER["PHP_SELF"] != $loginPage) {
unset($checkUserNum);
// Redirect to index page
header("Location: [url]http://[/url]" . $_SERVER["HTTP_HOST"] . "/Intranet/index.php");
exit;
}
} else {
unset($checkUserNum);
// Set redirect page
$_SESSION["redirectPage"]=$_SERVER["PHP_SELF"];
// Set initial securityLevel
$_SESSION["initialSecurityLevel"] = "5";
// Redirect to index page
header("Location: [url]http://[/url]" . $_SERVER["HTTP_HOST"] . "/Intranet/index.php");
exit;
}
}
if (isset($POST["loggingOn"]) == "In") {
if (isset($SESSION["wrongLogin"]) == "Yes") {
unset($SESSION["wrongLogin"]);
}
$userName = $POST["userName"];
$passWord = $_POST["passWord"];
// Check username and password
$checkUser ="SELECT userId, securityLevel FROM " . $userDatabase . " WHERE userName = '" . $userName . "' AND passWord = '" . $passWord . "'";
$checkUserResult = mysql_db_query($database, $checkUser) or die ("Couldn't execute checkUser query.");
$checkUserRow = mysql_fetch_array($checkUserResult);
$userId = stripslashes($checkUserRow["userId"]);
$securityLevel = stripslashes($checkUserRow["securityLevel"]);
$checkUserNum = mysql_num_rows($checkUserResult);
if ($checkUserNum >= 1) {
$_SESSION["loggedOn"] = "yes";
$_SESSION["userId"] = $userId;
$_SESSION["securityLevel"] = $securityLevel;
unset($_SESSION["initialSecurityLevel"]);
} elseif ($checkUserNum == 0) {
$_SESSION["wrongLogin"] = "Yes";
}
if (isset($_SESSION["redirectPage"])) {
$destinationPage = $_SESSION["redirectPage"];
unset($_SESSION["redirectPage"]);
header("Location: [url]http://[/url]". $_SERVER["HTTP_HOST"] . $destinationPage);
exit;
}
}
if (isset($SESSION["loggedOn"])) {
$loggedOn = $SESSION["loggedOn"];
$userId = $SESSION["userId"];
$securityLevel = $SESSION["securityLevel"];
$getUserName ="SELECT userName FROM " . $userDatabase . " WHERE userId = '" . $userId . "'";
$getUserNameResult = mysql_db_query($database, $getUserName) or die ("Couldn't execute getUserNameResult.");
$getUserNameRow = mysql_fetch_array($getUserNameResult);
$userName = stripslashes($getUserNameRow["userName"]);
}
?>