Help needed on PHP session

[kks_krishna]

HI,

 

i want to implement session in my site. If for a particular page should be accesses by only the loged in user. so I need to check whether the user is logged in or I shoud forward to Registration page or login page.

 

Once the user is logged in we can use the userid to log the activities. How can we do this?

[tamumech]

When the user logs in, set $_SESSION['auth'] to TRUE or whatever.  Then on each page check it like this:

 

<?php 
session_start();
if ( @$_SESSION['auth'] != "TRUE" )
{
header("Location: login.php");
die();
}
?>

[kks_krishna]

Thank you buddy.

[wildteen88]

Don't use @ for suppressing errors.

 

If you are checking input variables (_GET, _POST, _COOKIE, _SESSION etc) values always use isset function and then check it's value.

So instead of:

if ( @$_SESSION['auth'] != "TRUE" )

 

Do:

if ( isset($_SESSION['auth']) && $_SESSION['auth'] != "TRUE" )

 

@ should only be used as a last resort.

[kks_krishna]

How to set set $_SESSION['auth'] to TRUE.

[sinisake]

I guess you have login form?

Check DB fileds for username and password and if user exists, set $_SESSION['auth']=true;.

[cooldude832]

its just like assigning any other variable, but it must be done pre headers and you have to have session_start(); at the top of the page

 

like

$_SESSION[string or var] = "value";

[kks_krishna]

Its working fine for me.

 

How can I terminate the session when user clicks on the LogOut button.

 

Also guide me how to store the user login into cockies so that when user comes next time it should automatically logged in.

[kks_krishna]

How to reterive the values from session

[cooldude832]

same way

$var = $_SESSION[sesionvar];

[kks_krishna]

 

HI,

 

What is the difference between using print and echo.

Normally for printing I am using print() method. what is the use of echo().

[kks_krishna]

Please check the code whether its correct :

 

<?php
include("UsersOperations.php");
$user = new UsersOperations;
$user_name = $_GET['user_name'];
$pass = $_GET['pass'];
$result = $user->check_user($user_name,$pass);
if($result==1)
{
session_start();
$_SESSION['auth'] = TRUE;
$_SESSION['user_name'] = $user_name;
header("Location: ../index.php");
die();
}
?>

 

<?php 
			$var = $_SESSION['user_name']; 			
			print($var);
		?>

 

[sinisake]

session_start(); -MUST BE ON THE TOP OF THE CODE,

otherwise it wouldn't work.

you mustn't have ANY other output before starting session...

[kks_krishna]

Thanks.

 

How to terminate the session when clicking on logout?

[sinisake]

 

http://php.net/session_unset