Dowlat

Mysql offers the OFFSET in conjunction with LIMIT, that is the quickest method.

What is the issue with file_get_contents, it works fine for me, I have not tried simple xml however, but if its just the URL you need then file_get_contents should be fine.

That code looks pretty solid and I'll throw in a few pointers maybe some food for thought. One has to realize there is never a system out there that will guarantee 100% security from the client side, because you as the Coder/Developer can only implement so many security measures. Many people if you look at statistics online use the same password for multiple sites varying from social networks, email, forums, online services...etc One of the many ways you can prevent this is forcing your clients to change their password every month or so, and preventing the same passwords from being used. If someone is trying to access your clients information and the theft/criminal knows the individual on a personal level, He can attack other sites which have his information and haven't implemented proper security measures, and the cyber criminal will most likely try it on other sites he knows the victim is using the password on. If you can manage to steal the password from 1 site, you can try that password on several other websites regardless of how secure your code is. There was a case not too long ago that the CEO of Yahoo refused to use a Passcode on her iphone, and alot of confidential information such as emails with co-workers was on her phone. Yahoo implements a great security system for login, but the security hole could be the CEO. Imagine someone stole her phone. So think about this carefully if you are worried with security, alot of people believe its the code itself, in most cases its not.

Post your code, where you are setting the sessions.

Jackcode, The only way the profile link will be printed entirely is if the conditional statement returns (BOOL) True. If your link is visible then thats a different story, your problem lies with the html. If your conditional statement is true, then the ID should print a number more than 0, and it is set. so I don't see how your url could be empty.

Your conditional expression is not returning true. Print the contents of $_SESSION and check if it has been properly initialized in your code. Also Jack, make it good habit to always encapsulate your code with the CODE TAGS provided in the editor.