[RESOLVED] problem with sessions and register globals

djbryson

I'm trying to get my code to work with register globals off.

I initialize the session var

$_SESSION['usr'] = strtoupper($usr);

Then I include this on every page:

if (!$_SESSION['usr']) {
 $_SESSION = array();  // Unset all of the session variables.
  session_destroy();
  die ("blah blah"); 
}

The above works fine... but if i change my session var init to:

$_SESSION['usr'] = strtoupper($_SESSION['usr']);

then

if (!$_SESSION['usr']) {...

comes true everytime.

dougal85

What exactly are you containing in usr? if its a string it will evaluate to 'true' every time, unless its empty.

djbryson

it's a login form. They enter a username and password, submit. I check the database for a match... if it matches then:
$SESSION['usr'] = strtoupper($usr);
So, it's a string. And that works fine.
But if I change it to
$SESSION['usr'] = strtoupper($SESSION['usr']);
Then
if (!$SESSION['usr']) { .... comes true...

bradgrafelman

I think we might need to see more of your code, but if you're trying to check if the variable is empty or not set, you might want to use the [man]empty/man function instead.

djbryson

wait a minute... i'm retarded, lol.
I was doing it right all along.
$SESSION['usr'] = strtoupper($usr);
I'm uppercasing the session var.
$SESSION['usr'] = strtoupper($_SESSION['usr']);
that doesn't work cause the session var doesn't exist yet.
I'm trying to set a new session variable to itself, which doesn't exist, lol.
You shouldn't drink and code! Although, sometimes you come up with cool stuff.

bradgrafelman

I was just assuming $usr was old code that depended on register_globals being turned On, since you didn't show us a variable delcaration for it.

Anywho, don't forget to mark this thread resolved.

djbryson

reg globals is off, I grab it from $_POST
the $usr var comes from the submitted form.
I set the session var to $usr
thanks for your help dude