Sessions getting lost

[adam291086]

What would cause a session to get lost? I have set some session, if they are not set, a meta refresh takes place. I know the session is set as i can echo it out on other pages. But on others the session won't echo out.

 

Any ideas?

[trq]

Have you a call to session_start() on each page using sessions?

[adam291086]

Yep session_start(); is there

[trq]

Were going to need to see some code then.

[adam291086]

checking the session

<?php 
session_start();
// is the one accessing this page logged in or not?
if (!isset($_SESSION['db_is_logged_in'])
   || $_SESSION['db_is_logged_in'] !== true) 
{
// not logged in, move to login page   
echo "<meta http-equiv=\"refresh\" content=\"0;url=http://www.bcyorkshire.co.uk/admin/login.php\">";
}

 

setting the session

<?php
// we must never forget to start the session
session_start(); 
$errorMessage = '';
  $userId = $_POST['txtUserId'];
   $password = $_POST['txtPassword'];
   
   mysql_real_escape_string($userId);
   mysql_real_escape_string($password);
include '../database/config.php';
// check if the user id and password combination exist in database
$conn;   
$sql = "SELECT user_name
           FROM tbl_auth_user
           WHERE user_name = '$userId' 
                 AND user_password = PASSWORD('$password')";

   $result = mysql_query($sql) 
             or die('Query failed. ' . mysql_error()); 

   if (mysql_num_rows($result) == 1) {
      // the user id and password match, 
      // set the session

      $_SESSION['db_is_logged_in'] = true;



  // adds the username to session
     
   $row = mysql_fetch_assoc($result);
        $_SESSION['username'] = $row['user_name'];


      // after login we move to the main page
      header('Location: main.php');
      exit;
   } else {
      $errorMessage = 'Sorry, wrong user id / password';
   }

   include '../database/closedb.php';


if ($errorMessage != '') {
?>
<p align="center"><strong><font color="#990000"><?php echo $errorMessage; ?></font></strong></p>
<?php
}
?>

 

 

 

[Chris92]

<?php 
session_start();
// is the one accessing this page logged in or not?
if ( empty($_SESSION['db_is_logged_in']) ) 
{
    // not logged in, move to login page   
    echo "<meta http-equiv=\"refresh\" content=\"0;url=http://www.bcyorkshire.co.uk/admin/login.php\">";
}
?>

[trq]

Replace...

 

if (!isset($_SESSION['db_is_logged_in'])
  || $_SESSION['db_is_logged_in'] !== true)

 

with....

 

if (!isset($_SESSION['db_is_logged_in']))

 

ps: Using the mysql PASSWORD function to store your passwords will lead to code braking if you ever upgrade mysql versions. Stick to md5.

[adam291086]

It is still being lost and the redirecting occurs

[Sulman]

Is the session id changing?

 

Try echoing session_id(); to have look.