[RESOLVED] Variable URL Question

[brendan2b]

I have a login form, and once the user logs in it redirects them to

myalbum.php?username=$username

I have session variables running throughout my scripts

$_SESSION['username'];
$_SESSION['password'];

At the top of the myalbum.php file do I need to set

 $username = $_SESSION['username']; 

And then will it pull out all the information for the correct username? Im still a little shaky on the whole url query thing.

Thanks

[intenz]

Don't put the username in the GET URL query. Just do when you process the form...

<?php
session_start();

$query = mysql_query( "SELECT id FROM users WHERE user = '{$_POST['user']}' AND pass = md5( '{$_POST['pass']}' )" );
if( mysql_num_rows( $query ) == 1 )
{
	// User is logged in
	$_SESSION['username'] = $_POST['user'];
}
else
{
	// User couldn't log in
	die( 'Wrong username/password or the user does not exist.' );
}
?>