Problem passing vars with SESSION

[gameboy]

Hello,

This small script is activated when members login. First time creates new folder, otherwise navigates to members folder.

My problem is the DB part is not consist enough in identifying the member login in. So have been trying to use SESSION, but can't get it to work. This is the script with the DB part still in place:

<?php
ob_start();
$Database = mysql_connect("localhost", "vars", "vars");
mysql_select_db("database");
$fields = mysql_query("SELECT * FROM users");
$Username = mysql_result($fields,0,"username");
$dirname = $Username;
$filename = "on/cont/" . "$dirname";
if (file_exists($filename)) {
header ( "Location: " . "$filename" . "$dirname");
} else {
mkdir("on/cont/ " . "$dirname", 0777);
echo "welcome " . "$dirname" . "Your Area Is Being created.";
}
ob_end_flush();

have tried this last but will not work:

<?php
session_start();
if (isset($SESSION['username']))
$user = $SESSION['username'];
else
$user = "";

print ($user);
?>

Print Command purely for test purposes. Finally it should be made clear that login is in dir(a) while this is in dir(d), while directory structure is simply:
a,b,c,d,.

Any help with this is greatly appreciated, as I'm not moving at all, (haven't for two days, really stuck).

DG

[freedmania]

You need to set $_SESSION['username'] before you can test for it. And first of all, you need session_start(); at the very top of your php.

[gameboy]

freedmania; wrote:

You need to set $_SESSION['username'] before you can test for it. And first of all, you need session_start(); at the very top of your php.

I already set sessions here in my script:

?php>

function checkLogin ( $levels )
{
// start session

  session_start ();
  global $db;
  $kt = split ( ' ', $levels );

  if ( ! $_SESSION['logged_in'] ) {

     $access = FALSE;

     if ( isset ( $_COOKIE['cookie_id'] ) ) {//if we have a cookie

        $query =  'SELECT * FROM ' . DBPREFIX . 'users WHERE ID = ' . $db->qstr ( $_COOKIE['cookie_id'] );

        if ( $db->RecordCount ( $query ) == 1 ) {//only one user can match this
           $row = $db->getRow ( $query );

           //let's see if we pass the validation,
           if ( $_COOKIE['authenticate'] == md5 ( getIP () . $row->Password . $_SERVER['USER_AGENT'] ) ) {
              //set the session

              $_SESSION['user_id'] = $row->ID;
              $_SESSION['logged_in'] = TRUE;

              //check the level access,
              if ( in_array ( get_level_access ( $_SESSION['user_id'] ), $kt ) ) {
                 //
                 $access = TRUE;
              }
           }
        }
     }
  }
  else {
     $access = FALSE;

     if ( in_array ( get_level_access ( $_SESSION['user_id'] ), $kt ) ) {
        $access = TRUE;
     }
  }

  if ( $access == FALSE ) {
     header ( "Location: " . REDIRECT_TO_LOGIN );
  }

}

?>

this is the login:

<?php
require_once ( 'settings.php' );

if ( array_key_exists ( 'submit_check', $POST ) )
{
if ( $POST['username'] != '' && $POST['password'] != '' )
{
$query = 'SELECT ID, Username, Active, Password FROM ' . DBPREFIX . 'users WHERE Username = ' . $db->qstr ( $POST['username'] ) . ' AND Password = ' . $db->qstr ( md5 ( $POST['password'] ) );

     if ( $db->RecordCount ( $query ) == 1 )
     {
        $row = $db->getRow ( $query );
        if ( $row->Active == 1 )
        {
           set_login_sessions ( $row->ID, $row->Password, ( $_POST['remember'] ) ? TRUE : FALSE );
           header ( "Location: " . REDIRECT_AFTER_LOGIN );
        }
        elseif ( $row->Active == 0 ) {
           $error = 'Your membership was not activated. Please open the email that we sent and click on the activation link.';
        }
        elseif ( $row->Active == 2 ) {
           $error = 'You are suspended!';
        }
     }
     else {
        $error = 'Login failed!';
     }
  }
  else {
     $error = 'Please use both your username and password to access your account';
  }

}
?>

I still can't get it to work, but I'm thinking it wont work, and I may need to change the above? If so that will be a real pain.

[djjjozsi]

hello,

start the session in the very beggining of your page, and not just inside a function.

?php> is in your code. and use [ php ] [ / php ] in your posts please, your code
would be highlighted and more readable.

and use

	//error_reporting(E_ERROR | E_PARSE);
	error_reporting(E_ALL);
	 ini_set("display_errors", 1);

to know if there is an unset but used variable in your code.

jjozsi