session issue

[popcornplya]

I have a script I'm working on, and the session variables are empty when I don't have www. in my url, any help?

Is this a php issue?

[popcornplya]

Sorry, can't edit.. but my client is using godaddy hosting if that helps.

[drisate]

looks like a script config problem...but with no code, no way to help you out ...

[popcornplya]

Login.php

<?php
session_start();
if($_SESSION['logged_in']==true) {
header("Location: index.php");
exit;
}
$user = $_POST['user'];
$pass = md5($_POST['pass']);
if($user && $pass) {
include("config.php");
$user = mysql_real_escape_string($user);
$user = htmlentities($user);
$sql = mysql_query("SELECT * FROM `users` WHERE `username`='$user' && `password`='$pass'");
if(mysql_num_rows($sql)==1) {
	$_SESSION['logged_in']=true;
	$_SESSION['user']=$user;
	header("Location: index.php");
	exit;
} else {
	header("Location: index.php?e=1");
	exit;
}
} else {
header("Location: index.php");
}
?>

 

Other pages:

<?php
session_start();
if($_SESSION['logged_in']) {
echo '<p>Welcome, '.$_SESSION['user'].'</p>';
}
?>

[genericnumber1]

Try setting your session.cookie_domain in your php.ini to be mydomain.com (no www.)... see if that helps at all. It's likely that the session ID isn't being sent, but I'm not sure what the default cookie domain is for sessions.

[popcornplya]

How do you edit ini's on shared hosting?

Sorry I'm not a PHP pro so if I ask any stupid questions please excuse me.

[genericnumber1]

There are very few stupid questions

 

I'm sure on your shared hosting panel there is probably some option to edit your php.ini - I don't use godaddy, so I don't know how you would do it with them.

[Cory94bailly]

How do you edit ini's on shared hosting?

Sorry I'm not a PHP pro so if I ask any stupid questions please excuse me.

 

I used godaddy before my friend got a dedicated server (free for me >:])...

 

In your root directory, make a new file called "php.ini" (in some cases, try "php5.ini")

[popcornplya]

Thanks for your help guys, but I just fixed this with htaccess (made it redirect to www.)