session problem

[ice_berg16]

i use session keep the user infomation

in every page i do the follow code to check if the user login or not

sessoin_start();
if (session_is_registered('member'))
.........display the user interface
else
echo "you have not login";

but when i try to login ,the page doesn't show the welcome info
instead,it show the login form;
but other links in the page are added the PHPSESSID=........"

i think the variable $member has been registered ,isn't it?
but why the session_is_registerd() function doesn't work?
in the php.ini register global =on;
is there another way to check this,if i dont use the function?

[cahva]

You should use $SESSION instead of those session_is registered() things... Also you can register a session simply by this:

session_start();
$_SESSION['member']='whatever';

And you can check if session is registered by yhis:

session_start();
if (empty($_SESSION['member'])
echo "you have not login";
else
.........display the user interface

Allthought you have globals turned on, I advise you to still use $SESSION,$POST and other predefined variables. And when using sessions this is really important security-wise!

[ice_berg16]

but the php server's version is 4.0.1
i can't use the new array $_SESSION
🙁

[ice_berg16]

now the problem is

sometimes the code works fine

but sometimes it doesn't works

can anyone explain it?

[Grisu]

As I do not know when you register the session, I think it is the order in which you do the steps.

If you set $member to something this has nothing to do with the session. You have to have session_register('member') somewhere before. One thing I did to get at least some safety in the script before using $_SESSION, was the follwing:

$member = "";
session_start();
session_register('member');

if ($member == "") {
echo "You have not logged in";
} else {
// display the user-interface
}

Anyway cahva is right and you should update your server if that's possible.

Grisu

[ice_berg16]

now i find the problem
i use session_id() to test the session
every time i refresh the page
the session_id is changed

why does this happen?

can i sovle it?