sessions

[stryker1080]

I was reading up on the sessions and was wondering how i should use sessions when someone logs out and logs in... Im thinking id set up a script that conects to database, checks if user /pass is correct then starts a session and allows user to view pages... Id set a $SESSION['loged'] to yes or 1 or something, and on every page i start a session and check if 'loged' is set correct? If its not i send them to login page.. But now what do i do if they want to logout , should i use session_destroy(); or unset($SESSION['loged'])... Also another question i have, if i unset a variable like $_SESSION['loged'] does it become just empty and stays empty always or does the actual variable get deleted? How can i check if its been unset? would i use an if statement checking if isset( ) or empty( ) ... Whats the difference between the two. Does isset () check if something stores a value or if the variable is just reigstered but null?

[mattvenables]

OK, I would do exactly what you are saying. To set the session, you should probably use:

$logged = true;
session_register("logged");

on the top of every page, use this:

session_start();
if( ! isset($_SESSION['logged'])) {
header(....redirect to logon page);
}

to clear the session data, use:

unset($_SESSION['logged']);
session_destroy();

[stryker1080]

do i need to use session_register("") or can i just assing something to $_SESSION['blah']=1 ? What would be the diff?

[Weedpacket]

Originally posted by stryker1080
do i need to use session_register("") or can i just assing something to $SESSION['blah']=1 ? What would be the diff?

You can just do the latter - assign stuff to $SESSION[] array elements. It would be simpler, more reliable and less confusing than trying to mix $_SESSION and session_register(). See all the Caution notes on the [man]session_register[/man] page.