Getting session variable to check it

jnorris42

My login page does this:
// Set Session Value
$_SESSION['loggedInUser'] = @$eg_Result1['username'];
// Go to page
header("Location: db-index.php");

db-index.php, and every other page that I want only people who are logged to view must obviously check.
If the session variable was set to 'true' then I could simply check for 'true':
if (!isset($SESSION['loggedInUser'])
|| $SESSION['loggedInUser'] !== true)

But!! How do I do that check if the Session, as in my case, is not set to a universal 'true' but to whatever username the user has. What do I put after the !== please?

LoganK

Nothing. Get rid of that whole thing after the "||". Just have the isset() function - since you don't set anything if the user didn't login correctly, then if the username variable doesn't exist, then very simply they didn't login right.

jnorris42

I got that code from another site!
So - sorry - I've tried so many things after your reply and keep getting in knots!
My code looks like this. I want it to continue to display the page if there IS a logged in user, and go back to the login page if not.

<?
// Enable sessions
session_start();
// Turn on magic quotes to prevent SQL injection attacks
if(!get_magic_quotes_gpc())
set_magic_quotes_runtime(1);

// Check if they are logged in
if (!isset($_SESSION['loggedInUser']);
?>

It says Unexpected ';' whether I put that final ':' in or not! So I cannot get to actually see what happens if/when it works.

Also should I add this or not:
{
// not logged in, move to login page
header('Location: login.php');
exit;
}

LoganK

That unexpected ";" is because you have paranthesis problems. It should be "if (!isset($SESSION['loggedInUser']))", not "if (!isset($SESSION['loggedInUser'])". That plus the fact that if statements don't have semicolons after them 😃

jnorris42

I will never go to another board again - I didn't even check their code and missed something as obvious as a ). Thanks!

LoganK

You're welcome! If this is resolved, please mark it so!