Re: Deleting session vars
| From: | Boris.C | Date: | Tue, 31 Oct 2000 11:25:37 +0000 |
| Subject: | Re: Deleting session vars | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-22914@lists.php.net to get a copy of this message | ||
Here I try to be more precise...
Imagine youre on a page and youre member... you log in with your name and
your password.
name="name" value="Maxim"
name="password" value="dunno"
are submitted to the PHP script.
_____________________________
script:
Session Var "userid" is registered.
If name and pasword are correct,
userid is set to name: $userid = $name;
______________________________
Now youre surfing through the Site saving sth to your Profile.
Now your friend wants to enter his Profile (Same computer, sessions still
registered)
and loggs in with following Form data:
name="name" value="Boris"
name="password" value="askme"
Now the same Login Script registers "userid"
and now should look wether askme is the right
password for Boris, but sadly $name still contains
Maxim. So there seems to be sth like a reference between
$name and $userid, but I have not set it.
When I leave out Session_start(), anything works ok.
But then I cant register Boris as new User ID.