$_SESSION dont stor data!

[Seol]

HI, I need your help... first I have PHP 4.3.5 and SQL 2.0.49 on winxp sp2.
I have a problem with $SESSION variables, after i set them on a webpage they are lost on the next page... the session ID is passed trough the URL or cookie as expected, but if i try to recover the data from $SESSION array, its empty!!! I dont know what can be happening...i Have tried to change php.ini to globals on/off cokies on/off neither way is working... any ideas?

[zedan_80]

may be u forgot to use session_start() before storing data in $_SESSION

[Seol]

Actually Im working with Classes, so, i Have a class for the session process, i create a new objet before anything, the constructor of the class has the session_start(); on it. I even try putting an extra session_start(); just before putting the data into $_SESSION variables...but didnt work either....

Besides that, im sure its saving data before doing the change of page, cause i used some echos to check it..but just when return to the page it called the class or another page... the data is lost. I chek the session too, if i echo the session ID it does appear and is the same always... it just that seems like the $_SESSION variable is cleanned some way...

Here is part of the class:

class sentry {

var $loggedin = false;	
var $userdata;				
function sentry(){
                             session_start();

	header("Cache-control: private");
}

and the part where i need to check if there is stored data:

function checkLogin($group = 3,$user = '',$pass = '',$goodRedirect = '',$badRedirect = ''){

	// Include database and validation classes, and create objects
	require_once('DbConnector.php');
	require_once('Validator.php');
	$validate = new Validator();
	$loginConnector = new DbConnector();
    		// If user is already logged in then check credentials

	if ($HTTP_SESSION_VARS['user'] && $HTTP_SESSION_VARS['pass']){

......
}else{
..... here is the part when stored new data:

if ($loginConnector->getNumRows($getUser) > 0){
			// Login OK, store session details
			// Log in

			$HTTP_SESSION_VARS["user"] = $user;
			$HTTP_SESSION_VARS["pass"] = $this->userdata['pass'];
			$HTTP_SESSION_VARS["grupo"] = $this->userdata['grupo'];


				if ($goodRedirect) {
			header("Location: ".$goodRedirect."?".strip_tags(session_id())) ;
			}
			return true;

		}else{

....
}

[Seol]

Well, here is my code, ive been working couple of days on these and i can figure it ou what is wrong... when i log in, the session start, the session ID is passed to the next page or stay on the log in page if needed, but variables Stored in $_SESSION superglobal are lost, and i dont know why is happening... im using classes here is the code for the session handling class:

<?php
////////////////////////////////////////////////////////////////////////////////////////
// Class: sentry
// Purpose: Control access to pages
///////////////////////////////////////////////////////////////////////////////////////
class sentry {

var $loggedin = false;	//	Boolean to store whether the user is logged in
var $userdata;			//  Array to contain user's data

function sentry(){
            session_start();


            header("Cache-control: private");
}

//======================================================================================
// Log out, destroy session
function logout(){
	unset($this->userdata);
	session_destroy();
	return true;
}

//======================================================================================
// Log in, and either redirect to goodRedirect or badRedirect depending on success
function checkLogin($group = 3,$user = '',$pass = '',$goodRedirect = '',$badRedirect = ''){

	// Include database and validation classes, and create objects
	require_once('DbConnector.php');
	require_once('Validator.php');
	$validate = new Validator();
	$loginConnector = new DbConnector();
    		// If user is already logged in then check credentials

	if (isset($_SESSION['user']) && isset($_SESSION['pass'])){
	echo "session iniciada";
	print_r($_SESSION);
                     	// Validate session data
		if (!$validate->validateTextOnly($_SESSION['user'])){return false;}
		if (!$validate->validateTextOnly($_SESSION['pass'])){return false;}

		$getUser = $loginConnector->query("SELECT * FROM cmsusers WHERE user = '".$_SESSION['user']."' AND pass = '".$_SESSION['pass']."' AND grupo = ".$group.' AND enabled = 1');
                    if ($loginConnector->getNumRows($getUser) > 0){
			// Existing user ok, continue
			if ($goodRedirect != '') { 
			        echo "good redirect";
				header("Location: ".$goodRedirect."?".strip_tags(session_id())) ;

			}			
			return true;
		}else{
			// Existing user not ok, logout
			$this->logout();
			return false;
		}

	// User isn't logged in, check credentials
	}else{

		// Validate input
		if (!$validate->validateTextOnly($user)){return false;}
		if (!$validate->validateTextOnly($pass)){return false;}

		// Look up user in DB
                    $getUser = $loginConnector->query("SELECT * FROM cmsusers WHERE user = '$user' AND pass = PASSWORD('$pass') AND grupo = $group AND enabled = 1");
                    $this->userdata = $loginConnector->fetchArray($getUser);

		if ($loginConnector->getNumRows($getUser) > 0){
			// Login OK, store session details
			// Log in

			$_SESSION["user"] = $user;
			$_SESSION["pass"] = $this->userdata['pass'];
			$_SESSION["grupo"] = $this->userdata['grupo'];

				if ($goodRedirect) {

			header("Location: ".$goodRedirect."?".strip_tags(session_id())) ;
			}
			return true;

		}else{
			// Login BAD
				unset($this->userdata);
			if ($badRedirect) { 
				header("Location: ".$badRedirect) ;
			}		
			return false;
		}
	}			
}
}	
?>

And here is a where is redirectionated after login (but when the class is called again, the info is lost and it will takeme back to the login page)

<?php
require_once('../includes/Sentry.php');
$theSentry = new Sentry();
if (!$theSentry->checkLogin(1) ){ header("Location: login.php"); die(); }
?>

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title> Intranet</title>
</head>

<body>


</body>
</html>

NOTE: that "1" that is called on the function is for cheking the permission group only.

ANYONE? I need this for a bigger project, i dont understand why is not working...

[okuto1973]

Hi,
see if all is good and how you want in the php ini this is very important.

To check the php ini write a page like this:

<?
echo phpinfo();
?>

I use these setings:

PHP Version 4.4.0

register_globals On

magic_quotes_gpc On

//Usefull to have the correct value to make an insert witout addslashes to ALLvariables

session.auto_start off
session.use_trans_sid off
session.use_cookies On

Becouse of i use superglobal ON i take care of initialize all variables that could have no value and can be entered in http
I use also

session_register(sessione);

instead $_SESSION

Check if the variables are regitered in session as you want (for this try some echo)
in the class and out of the class....