that was very helpful...Thank you. One question I have is that I want to ensure that my admin page cannot get accessed unless a variable that was registered upon a successful login has been passed into the session...what can I do to ensure this? Thank you, Shawn On 5/4/05, Patel, Aman <aman.patel@xxxxxxxxxx> wrote: > From the PHP help page on "session_register()" > > "If your script uses session_register(), it will not work in > environments where the PHP directive register_globals is disabled." > > I'm assuming since you compiled and installed PHP 5.0.4 that your > "register_globals" is disabled. I wouldn't recommend enabling it to fix > this problem. Instead use $_SESSION super global to register session data. > > So instead of: > > session_register("username"); > > try this: > > $_SESSION['username'] = $username; /* TO SET */ > $username = $_SESSION['username']; /* TO GET */ > > Hope this helps, > > Aman > > Shawn Singh wrote: > > Hey All, > > > > I'm fairly new to PHP Programming. I have compiled and installed > > postgres version 8.0.1, and with that compiled postgres support into > > my postgres (I'm using PHP version 5.0.4), and I've compiled support > > for PHP into Apache (version 2.0.53) and all is working (in that I can > > embed PHP into my HTML documents and get the expected results). > > > > Recently I started working on a website in which I would like there to > > be an administration page where the person who is logged in can add > > and delete records. I figured that the best way to do this would be to > > establish a session, (at the login page) then if the user login is > > successful, I would then register the username and password and > > redirect the user to the admin page. I chose not to use cookies, b/c > > everyone may not have cookies enabled on their browser and I didn't > > want that to be a hurdle that a user would have to jump over. > > > > I've written the code but when I try to login to the site I get this message: > > > > Warning: Cannot modify header information - headers already sent by > > (output started at /export/home/www/htdocs/login.php:13) in > > /export/home/www/htdocs/login.php on line 25 > > > > Warning: Unknown: Your script possibly relies on a session side-effect > > which existed until PHP 4.2.3. Please be advised that the session > > extension does not consider global variables as a source of data, > > unless register_globals is enabled. You can disable this functionality > > and this warning by setting session.bug_compat_42 or > > session.bug_compat_warn to off, respectively. in Unknown on line 0 > > > > Information I've seen on the web for these types of messages would > > indicate that I don't have a /tmp directory, but such is not the case. > > Other messages have indicated that my session variables are not > > getting written to /tmp, but that is not true either, as I have seen > > them in there...as I see entries such as: > > > > sess_ec2249332b8b29863f161461cf8c1409 > > > > So, I'm guessing that there aren't problems with my /tmp filesystem. > > > > Please excuse the lack of style as I have mainly been trying to hack > > out something, but plan to clean it up later. > > > > My source code for the login page is as follows: > > > <snip> > > -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php