Problem $_SESSION('$username') variable

[madhavbitra]

Hi Friends,

I have problem while getting assigned values from $_SESSION['MM_Username'] variable.

I am assigning the value, for this variable in login.php, the code looks like

                            session_start();
	$_SESSION['MM_Username'] = $loginUsername;

and from this assigned session variable, i am trying to get the values from header.php file, code looks like

session_start();
if(isset($SESSION['MM_Username']))
{
$loginUsername = $SESSION['MM_Username'];
}
else

$loginUsername = '';

if(!$loginUsername == '')
{
echo('Logged in As ' . $loginUsername );
}
else
echo('Not logged in, <a href="html/login.php" >Login</a>');

By running the above code, i am always getting "Not logged in , Login", message.
because, isset($_SESSION['MM_Username']) is returning false.

I have tried,with registering the session variables also, but gettig the same problem.

Please suggest me, the possible solutions.

Thanks in Advance,
Madhav Bitra.

[devinemke]

where/how is $loginUsername being initially set? it is not obvious from your code examples. if it is coming in via POST/GET then it looks like you are assuming that register_globals is ON and it may be OFF.

[bradgrafelman]

EDIT: Oops, didn't read your post carefully. As devinemke pointed out, the problem may be that the variable was never set properly in the first place. More information about how to access data from external sources can be found here: [man]variables.external[/man].

[madhavbitra]

Thanks for your reply devinemke,🙂 still have the problem.😕

Yes, as you told, the the variable $loginUsername has been initializing from POST method, i have checked in php.ini for register_globals and it had set to off.

here i am giving the code in login.php

if ($POST){
require("../Connections/connforlogin.php");
$loginUsername=$POST['UserName'];
$password=$_POST['Password'];

mysql_select_db($database_CompPlus, $CompPlus);
$LoginRS__query="SELECT UserName, Password, UserTypeID FROM usermaster WHERE UserName='".$loginUsername."' AND Password='".$password."'"; 

$LoginRS = mysql_query($LoginRS__query, $CompPlus) or die(mysql_error());
$loginFoundUser = mysql_num_rows($LoginRS);
if ($loginFoundUser > 0) 
{
	$loginStrGroup  = mysql_result($LoginRS,0,'UserTypeID');


	$_SESSION["MM_Username"] = $loginUsername;
	$_SESSION["MM_UserGroup"] = $loginStrGroup;	  

	echo "<script language=javascript>window.location.href='../index.php'</script> ";
}
else 
{
	echo "<script language=javascript>alert('Login credentials are wrong, please provide correct yousername and password.')</script>";
}

}

Please suggest, me how can i get rid of this problem.

[CoderDan]

instead of:

if(!$loginUsername == '') 

try

if($loginUsername != '') 

or

if($loginUsername ) 

or

if(!empty( $loginUsername)) 

or similar
your original statment, well, honestly, I'm not sure how it would end up evaluating, I'd have to check what the inverse of a string variable evaluates as, and if a simple '==' to an empty string would match it.