best way to show page only if user logged in?

[john.muckley]

hey guys!

 

I was wondering what the best or preferred way of only showing certain pages to users when logged in is?

 

I tried declaring a session variable 'active' as TRUE, and then checking for it on my 'logged in' page, but that didnt seem to work

 

I used this in the login page on successful login...

 

session_start();
$_SESSION['active'] ='TRUE';
header("location:userhome.php");

 

When i log in, i dont get any errors and it redirects me to userhome.php, which is...

 

 

<?php
include("session.php");

$sessioncheck = $_SESSION['active'];
echo 'You are logged in!! Session status is: ' . $sessioncheck ;

?>

 

and session.php looks like this...

<?php
session_start();
if ($_SESSION['active'] != 'true') {
header("location:login.php?response=4");
exit();
}
?>

 

but "logged in" or not, i get "You are logged in! Session status is: ", with no actual variable.

 

am i overlooking something?

 

Any help is appriciated!!

 

Thanks

Edited April 8, 2013 by john.muckley

[Rifts]

try changing this line:

 

 

$_SESSION['active'] ='TRUE';
 

 

 

to

 

 

 

$_SESSION['active'] ='true';
 

[trq]

Or better yet, use booleans instead of strings.

[john.muckley]

 

try changing this line:

 

 

$_SESSION['active'] ='TRUE';
 

 

 

to

 

 

 

$_SESSION['active'] ='true';
 

I did this, but it made no difference at all

[mac_gyver]

if nothing is displayed by the original code, then either you are not actually setting it or one of your session_start statement(s) is missing or is not working or you have managed to clear it at some point.

 

is your php's error reporting set to display all errors?