note 56574 added to ref.session

If you want prevent people directly setting, for example, a logged_in session variable to bypass your checks using the url?logged_in=true system, a quick trick is to try the line if (isset($_GET['logged_in'])) { die("Are you trying to take the mickey?"); } before you do anything else. I've not tested this heavily, but I'd value any discussion of its merits and potential flaws ... ---- Manual Page -- http://www.php.net/manual/en/ref.session.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+56574 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+56574&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+56574&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+56574&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+56574&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+56574&report=yes&reason=non-english Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+56574&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+56574&report=yes Search -- http://master.php.net/manage/user-notes.php