Suzanne — Sun, 07 Sep 2003 16:52:29 +0000

<?php
    Header(\"Location:_/customer.php\");
?>

http://ca.php.net/manual/en/function.header.php

brady.k — Sun, 07 Sep 2003 15:30:28 +0000

when i run the script, i get an error on line 10 (the header) and line 6 (header when i take out the session stuff). whats wrong with that?

Suzanne — Sun, 07 Sep 2003 05:23:22 +0000

lol, alrighty then. *mental note to be more direct and less confusing*

brady.k — Sun, 07 Sep 2003 01:21:04 +0000

Quote: well you need to open the session on every single page?

i took that as a type of "will"...geez, sorry.

ok, thanks.

Suzanne — Sat, 06 Sep 2003 20:17:15 +0000

You're not listening, Kyle.

session_start(); needs to be at the beginning of EVERY page. If it isn't, you won't be able to access the information stored in the $_SESSION variables.

To set session times, you would set a start time, and then when each page is accessed, start_session(); then check that variable (the time started) and if it's within the allowed time, proceed. If not, session_destroy(); and send them back to the login.

brady.k — Sat, 06 Sep 2003 18:48:36 +0000

no this is the login and session starter.

according to other people that i know that have worked with sessions, you can start a session, say it is open for x amount of time and then put a piece of code at the top of each page where it says you need the session to access it. that is what i'm asking about. how do i do that time amount and check for a session at certain pages? thanks

Suzanne — Sat, 06 Sep 2003 02:15:42 +0000

well you need to open the session on every single page? If it's already there, it will continue, if not, it won't.

So the first thing on every "page" needs to be session_start(); and then do whatever you need to do.

brady.k — Sat, 06 Sep 2003 01:53:12 +0000

i meant like the time it works and stuff like that

Suzanne — Sat, 06 Sep 2003 01:25:01 +0000

... you make them up, don't you?

I could set any session variable I wanted, including:

$_SESSION['annoyingpeople'] or
$_SESSION['pigsfeet']

Re: Login/Session Handling

m3rajk — Sat, 06 Sep 2003 00:59:29 +0000

i don't know them all, but here's some help...

<?php
$dbh = mysql_connect (\"localhost\", \"...\", \"...\") or die ('Database failure: ' . mysql_error($dbh));
mysql_select_db (\"customer\");
$search=mysql_query(\"SELECT * FROM customer WHERE username='$username' AND password='$password'); // this does what you want. it returns only those entries where the username and pw match what was entered
if (mysql_num_rows($search)==1) { /// if you found the person
    session_start();
    session.name('session');
    $_SESSION['username']=$username;
    $_SESSION['password']=$password;
    Header(\"Location:  <a href=\"http://.../customer.php\" class=\"bb-url\">http://.../customer.php</a>\");
}
else {
  echo('Wrong username.');
mysql_close($dbh);
?>