PHPSESSID vs. $_SESSION

Stinger51

In my 4.3 php.ini file, I have this :

session.name = PHPSESSID

And yet, on my own local Apache server (1.32) I have to use this construction to see if a session has begun :

if (!$_SESSION)
{
// register your session vars here
}

OTOH, this works on my commercial (pay for) web host :

if (!PHPSESSID)
{
// register your session vars here
}

Now which way is this supposed to be? One, or the other, or either / or ? This is driving me bonkers.

Steveo31

I would just do $_SESSION. I don't really know why, but it's just keeping to the book I suppose.

ScubaDvr2

As of PHP 4.2, register_globals is by default turned OFF, whereas in previous versions it was turned ON.

This means autoglobals do not work anymore.

For example, let's say I loaded the page:
website.com/page.php?variable=10

With register_globals on you could do the following:

echo $variable; //This would display 10

However, if it's OFF, this would return nothing (or an error, depending on your error levels)

If you wanted to echo the variable from the url, you'd have to do this:

echo $_GET['variable']; //This will now display 10

Likewise, using sessions, you should always use $_SESSION[]. That way, if register_globals is turned off it'll work splendidly.

$_SESSION['PHPSESSID']

Stinger51

Yes, I'm converting all of my old code over to the new standard (with auto_globals being set to off). For security reasons, I see it is better that way. And, as more web hosts update their PHP versions, we'll all have to do this anyway.

So I guess I will stick with :

if ( ! $_Session) // register those session vars

Tnx for your input.