Losing my session when I load a new page

[mdowling]

I'm trying to make my site not use PHPSESSID in the url string, but when I change my php.ini file I lose my session when I load a new page.

I tried this in my php.ini file:
session.use_only_cookies = 1
session.use_trans_sid = 0

When I logged in it worked, but when I tried to load another page I was logged out.

Here is my code that is run each page load. It checks if the user submitted to the login and password form and logs them in if they did. Is this where my problem comes from?

session_start();

if($_POST) {
  $_SESSION['name'] = $_POST["name"];
  $_SESSION['password'] = $_POST["password"];
}

$Link = mysql_connect("$hostname", "$dbuser", "$dbpass");
$result = mysql_db_query($database, "select confirmed from members where username LIKE BINARY '" . $_SESSION['name'] . "' and password LIKE BINARY '" . $_SESSION['password'] . "'", $Link);
$num = mysql_num_rows($result);

if($num < 1) {

  if($_POST) $error = "<center><b>Login failed.</b><br><font size = 1>usenames and passwords are case sensitive</font></center>";
  $_SESSION['name'] = "Guest";
  $LoggedIn = "FALSE";

} else {

	$c = mysql_fetch_row($result);
	if ($c[0] == 0) {
		$LoggedIn = "FALSE";
		$_SESSION['name'] = "Guest";
		$error = "<center><b>You must click the link in your confirmation email to login!</b></center>";
	} else {
		$TheDay = trim(date("D, M j, Y H:i a"));
		$sql = "UPDATE members SET lastactive = '".$TheDay."' where username = '".$_SESSION['name']."'";
		mysql_db_query($database, $sql, $Link);
		$LoggedIn = "TRUE";
	}
}

[harmor]

hmmm

I'm assuming you're calling session_start(); on the page where you say is losing the session.

If so try adding global $_SESSION; after session_start();
If you ae using functions then call the code in blue above in each function.

[batman]

code is kind of confusing. is the above your log in page? It looks almost as if you are trying to use sessions to verify user info? On log in page where it says this:

else {
            $TheDay = trim(date("D, M j, Y H:i a"));
            $sql = "UPDATE members SET lastactive = '".$TheDay."' where username = '".$_SESSION['name']."'";
            mysql_db_query($database, $sql, $Link);
            $LoggedIn = "TRUE";
        }

right by $LoggedIn = "TRUE";
add this:
$_SESSION['loggedin'] = "TRUE";

Then on all your other pages where you want to check to see if user is logged in use something like this:

session_start();
if($_SESSION['loggedin'] = "TRUE")
{
//do what you want when their logged in here!!
}
else
{
echo "I'm sorry it looks as if you are not logged in.";
include("login.php");
exit();
}

😃