Re: Problem Using Sessions. .

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



that was very helpful...Thank you.  One question I have is that I want
to ensure that my admin page cannot get accessed unless a variable
that was registered upon a successful login has been passed into the
session...what can I do to ensure this?

Thank you,

Shawn

On 5/4/05, Patel, Aman <aman.patel@xxxxxxxxxx> wrote:
>  From the PHP help page on "session_register()"
> 
> "If your script uses session_register(), it will not work in
> environments where the PHP directive register_globals is disabled."
> 
> I'm assuming since you compiled and installed PHP 5.0.4 that your
> "register_globals" is disabled. I wouldn't recommend enabling it to fix
> this problem. Instead use $_SESSION super global to register session data.
> 
> So instead of:
> 
>         session_register("username");
> 
> try this:
> 
>         $_SESSION['username'] = $username; /* TO SET */
>         $username = $_SESSION['username']; /* TO GET */
> 
> Hope this helps,
> 
> Aman
> 
> Shawn Singh wrote:
> > Hey All,
> >
> > I'm fairly new to PHP Programming. I have compiled and installed
> > postgres version 8.0.1, and with that compiled postgres support into
> > my postgres (I'm using PHP version 5.0.4), and I've compiled support
> > for PHP into Apache (version 2.0.53) and all is working (in that I can
> > embed PHP into my HTML documents and get the expected results).
> >
> > Recently I started working on a website in which I would like there to
> > be an administration page where the person who is logged in can add
> > and delete records. I figured that the best way to do this would be to
> > establish a session, (at the login page) then if the user login is
> > successful, I would then register the username and password and
> > redirect the user to the admin page. I chose not to use cookies, b/c
> > everyone may not have cookies enabled on their browser and I didn't
> > want that to be a hurdle that a user would have to jump over.
> >
> > I've written the code but when I try to login to the site I get this message:
> >
> > Warning: Cannot modify header information - headers already sent by
> > (output started at /export/home/www/htdocs/login.php:13) in
> > /export/home/www/htdocs/login.php on line 25
> >
> > Warning: Unknown: Your script possibly relies on a session side-effect
> > which existed until PHP 4.2.3. Please be advised that the session
> > extension does not consider global variables as a source of data,
> > unless register_globals is enabled. You can disable this functionality
> > and this warning by setting session.bug_compat_42 or
> > session.bug_compat_warn to off, respectively. in Unknown on line 0
> >
> > Information I've seen on the web for these types of messages would
> > indicate that I don't have a /tmp directory, but such is not the case.
> >  Other messages have indicated that my session variables are not
> > getting written to /tmp, but that is not true either, as I have seen
> > them in there...as I see entries such as:
> >
> > sess_ec2249332b8b29863f161461cf8c1409
> >
> > So, I'm guessing that there aren't problems with my /tmp filesystem.
> >
> > Please excuse the lack of style as I have mainly been trying to hack
> > out something, but plan to clean it up later.
> >
> > My source code for the login page is as follows:
> >
> <snip>
> 
>

-- 
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [PHP Users]     [Postgresql Discussion]     [Kernel Newbies]     [Postgresql]     [Yosemite News]

  Powered by Linux