Sessions wouldn't show or set

[Digiboy]

Hi guys,

 

I have an issue with SESSIONS in PHP and tried to find out why for 2 days and no success. This is a login page below divided into to login sections,

 

1- Facebook Login: Logins successfully, captures user data but wouldn't set sessions.

 

2- Custom Login: loges in fine and but same issue with sessions. It should create a session and redirect users to user folder if session exists,

 

<?php 
if (isset($_SESSION['login_token']) && isset($_SESSION['account_no'])) {header('Location:../user/index.php');} 
//if (!isset($_SESSION['login_token']) || !isset($_SESSION['account_no'])) {header('Location:../login/index.php');} 



?>
<?php include_once('../library/header.php'); ?>
<?php


require '../library/facebook.php';
/// login
// Create our Application instance (replace this with your appId and secret).
$facebook = new Facebook(array(
 'appId'  => '484846211552634',
 'secret' => '1ce89585da85f6c8ff877ab175a144fb',
));


$user = $facebook->getUser();


if ($user) {
 try {
   // Proceed knowing you have a logged in user who's authenticated.
   $user_profile = $facebook->api('/me');
 } catch (FacebookApiException $e) {
   error_log($e);
   $user = null;
 }
}


// Login or logout url will be needed depending on current user state.
if ($user) {
 $logoutUrl = $facebook->getLogoutUrl();


} else {


 $loginUrl = $facebook->getLoginUrl(array(
 'scope'   => 'user_birthday, user_hometown, email,user_location, publish_stream'));
}
 if ($user) {
 $account_no=mt_rand();
 //// check if correct
 $select=mysql_query("SELECT * FROM users WHERE email='{$user_profile[email]}' AND suspended='1'");
 if (mysql_num_rows($select)>=1) { header('Location:../index.php?msg=suspended');}
 else {
 $select_account_no=mysql_query("SELECT * FROM users WHERE account_no='$account_no'");
 if (mysql_num_rows($select_account_no)==0) {
 $select_email=mysql_query("SELECT * FROM users WHERE email='{$user_profile[email]}'");
 if (mysql_num_rows($select_email)==0) {
 $account_no=mt_rand();
 $login_token=sha1($account_no);
 $reg_date=date('Y-m-d');
 $insert=mysql_query("INSERT INTO users (account_no, first_name, last_name, email, reg_date, city, reg_via, login_token) VALUES ('$account_no','{$user_profile[first_name]}','{$user_profile[last_name]}','{$user_profile[email]}','$reg_date', '{$user_profile[user_hometown]}','1','$login_token')");
 $_SESSION['login_token']=$login_token;
 $_SESSION['account_no']=$account_no;

 if (mysql_num_rows($select_email)>=1) {
 $select_my_email=mysql_query("SELECT * FROM users WHERE email='{$user_profile[email]} AND suspended='0''");
 while ($row=mysql_fetch_array($select_my_email)) {
 $myaccount_no=$row['account_no'];
 $mylogin_token=$row['login_token'];
 $_SESSION['login_token']=$mylogin_token;
 $_SESSION['account_no']=$myaccount_no;

 echo"$myaccount_no";


 }}}}} }



// This call will always work since we are fetching public data.
$naitik = $facebook->api('/naitik');


?>



<?php login(); ?>
<div class="box">


<form action="<?php echo htmlentities($_SERVER['PHP_SELF']); ?>" class="login" method="post" id="login">
<h1 class='-login-title'>Already have an account</h1> 
  <section class="state-normal section-login">
   <label for="email">Email</label>
   <input type="email" name="email" class="validate[required,custom[email]] text-input"/>
  </section>


            <section class="state-normal">
   <label for="password">Password</label>
   <input type="password" name="password" class="validate[required] text-input"/>
  </section>
<p><a href="/recovery" title="Recover your password">Can't remember your password?</a></p>


  <section class="state-normal">
   <input type="checkbox" name="checkbox" id="checkbox1" />
   <label for="checkbox1">Remember me</label>
  </section>

  <button type="button" onclick="window.location = '../register/'" class="color-blue">Create a new account</button>
   <button type="submit" class="color-grey" name="login">Login</button>

 </form>

<div class="fb"><h1 class='fb-login-title'>Or login with Facebook</h1>
<?php if ($user): ?> <a href="<?php echo $logoutUrl; ?>">Logout</a><?php else: ?><a href="<?php echo $loginUrl; ?>"><img src="../img/facebook-connect.png" alt="Connect using Facebook" width="269" height="56" class="fb-connect-button"/></a><?php endif ?>




<p class="text-central">Skip registration using your Facebook Account</p>


</div>








<?php include_once('../library/footer.php'); ?>

[Digiboy]

Just an add on, I have also included session_start() in my header first line

[AyKay47]

Then post the updated code, because in the above code you have not called session_start() before attempting to use sessions.