Replacement for "$_SESSION"?

[Gatsby]

Hello everyone, I need help with what to do with my page since SESSION won't work for me. The reason that I can't use sessions is because register_globals is set to "off" on the server and I am not allowed to change that.

I need to collect data input by the user on Page-1, then I need to be able to retrieve that data on Page-2. The data consists of over thirty variables so I really do not want to store the info the URL; I also do not want to use cookies to avoid problems if the user has cookies disabled.

Can someone please direct me to what I should use instead of "$_SESSION"?

Code example is as follows:

***Page-1************
<?php session_start(); ?>

HTML Stuff

BODY Stuff

// Get values from user inputs in the form and store them in SESSION variables

$SESSION['Taxes'] = ($POST['element_5_1']+0);
$SESSION['Loan1'] = ($POST['element_8_1']+0);
$SESSION['Loan2'] = ($POST['element_9_1']+0);
etc...

***Page-2************
// Retrieve the SESSION variables and store them in new variables for calculation

$Taxes = ($SESSION['Taxes']+0);
$Loan1 = ($SESSION['Loan1']+0);
$Loan2 = ($_SESSION['Loan2']+0);
etc...

Thank you!

[Krik]

register_globals does not need to be on to use $_SESSION.

I have several sites where register_globals is off and I can use the $_SESSION super global.

[bradgrafelman]

Having register_globals turned off is a good thing; if it were on, you'd have to deal with the possible security exploits that it caused. For more info, see this man page: [man]security.globals[/man].

Can you show us a more complete version of the code you're using?

[Gatsby]

Hmm... it seems I'm misunderstanding the error message then. This is the message I get:

PHP Warning: Unknown: Your script possibly relies on a session side-effect which existed until PHP 4.2.3. Please be advised that the session extension does not consider global variables as a source of data, unless register_globals is enabled. You can disable this functionality and this warning by setting session.bug_compat_42 or session.bug_compat_warn to off, respectively in Unknown on line 0

The code that I posted contains examples of every case where I use something related to $_SESSION. I know it works as is because it worked on a different server.

[ixalmida]

That's not an error - that's a warning. Your server admin should set the variables my.ini variables as instructed in the warning (they are supposed to be disabled on a production server anyway).

Assuming you can't get your admin to implement the correct settings, you can bypass warning messages as so:

error_reporting(E_ERROR | E_PARSE);

[Gatsby]

Thanks ixalmida, that clears things up a bit for me.