Re: Sessions 2!!!

Hi, Tuesday, October 8, 2002, 6:53:43 AM, you wrote: SV> Hiya, SV> DOn't think I am getting anywhere!!! SV> I have no turned register_globals off and recoding my website, but I cant work out how to SV> do sessions. SV> The following code dosen't keep sessions. Its logs on, but I dosent keep a session SV> on another page. It should either get the post variables with the new username and passwords or SV> validate the SV> session variables and use them. SV> Help! SV> Thanks! SV> session_start(); SV> if(isset($_SESSION['ssun']) || isset($_POST['ssname'])) SV> { SV> //Check if the user name and password are stored in session variables, if not empty them. SV> if(!isset($_SESSION['ssun'])) SV> { SV> echo "Session ssun not set"; SV> $_SESSION['ssun'] = ""; SV> } SV> if(!isset($_SESSION['sspw'])) SV> { SV> echo "Session sspw not set"; SV> $_SESSION['sspw'] = ""; SV> } SV> //Attempt to logon. Set the logon form variables to the session variables. SV> if(isset($_POST['sspass'])) SV> { SV> $_SESSION['sspw'] =$_POST['sspass']; SV> } SV> if(isset($ssname)) SV> { SV> $_SESSION['ssun'] =$_POST['ssname']; SV> } SV> //Make sure no one breaks in, if in the param loggedin was set, unset it. SV> if(isset($loggedin)) SV> { SV> unset($loggedin); SV> } SV> if(isset($_POST['ssname'])) SV> { SV> //Check if the session username and password are correct SV> $result = mysql_query("SELECT userid FROM users WHERE SV> userpassword=PASSWORD('".$_POST['sspass']."') AND SV> userid='".$_POST['ssname']."'", $db_link); SV> } SV> else SV> { SV> //Check if the session username and password are correct SV> $result = mysql_query("SELECT userid FROM users WHERE SV> userpassword=PASSWORD('".$_SESSION['sspw']."') AND SV> userid='".$_SESSION['ssun']."'", $db_link); SV> } SV> $norows = mysql_num_rows($result); SV> if($norows==1) SV> { SV> $loggedin="yes"; SV> } SV> else SV> { SV> $loggedin="no"; SV> } SV> if(isset($logoff)) SV> { SV> if($logoff=="true") SV> { SV> $loggedin="no"; SV> $_SESSION['ssun']=""; SV> $_SESSION['sspw']=""; SV> } SV> } SV> } After the successful first login you are not saving the $_POST variables into the $_SESSION equivalents -- regards, Tom