Session Check!

[TheJoey]

Hello just wondering if theres a way i can apply an efficient sessions check to every page like

 

<?php 
session_start();
if(isset(!$_SESSION['login']))
{
echo 'You not meant to be here';
}
else{
HTML CODE
}

[trq]

You could put it in an include.

[ialsoagree]

That seems pretty simple and efficient to me, although not hard to spoof. It depends on the security necessary for your website. I've personally adopted the habit of saving session ID's in the database, and then saving any appropriate information there (like what user is logged in - and if they are logged in for that matter, IP's, etc.). This puts all the authentication server side and the only thing that the user submits is a session ID (much harder to spoof, although not impossible, hence the IP is checked too).

 

If the code you made works for you and you just want an easy way of including it all your scripts without copy and pasting it, you could put it into a file such as session.php and then have all your scripts run:

require_once('session.php');

[trq]

I've personally adopted the habit of saving session ID's in the database, and then saving any appropriate information there (like what user is logged in - and if they are logged in for that matter, IP's, etc.). This puts all the authentication server side and the only thing that the user submits is a session ID (much harder to spoof, although not impossible, hence the IP is checked too).

 

All session data is stored server-side anyway.

[TheJoey]

Would i just put

<?php 
session_start();
if(isset(!$_SESSION['login']))
{
echo 'You not meant to be here';
}

in the include ?

instead of html code

[trq]

Something like....

 

<?php 
  session_start();
  if (isset(!$_SESSION['login'])) {
    die('You not meant to be here');
  }
?>

[TheJoey]

Parse error: syntax error, unexpected '!'

hmm... because i want it to display the error if session is not.

[trq]

Sorry, I just copied your code. It should be....

 

<?php 
  session_start();
  if (!isset($_SESSION['login'])) {
    die('You not meant to be here');
  }
?>