> That's correct, although the cookie will remain resident it > requires an > inital page change/refresh. However after looking at your > code I'm not > convinced that is the problem since the first page of a > session creation > should still be usable with the session as the session ID is > still resident > in memory. Have you tried running the page w/o the use of > session_name()?
Alright that's good to hear. In a specific case that I'm having this problem the main PHP file is including file (content) that refers to $_SESSION[nSID_PeopleID] in main. This value is vital in rendering the page. So it should be there right? Also about removing session_name(), how can I do this. It was my understanding that you must call session_name before session_start() and session_register(). Is this not correct? > Also as an FYI $REMOTE_USER is an unsecure variable to use for checking > authentication. Basically because a url parameter will overwrite the > original $REMOTE_USER. > > easiest method (for me anyways) is: > > $REMOTE_USER = getenv('REMOTE_USER'); Yes I've never felt good about using REMOTE_USER. I will implement that idea right now, thanks! -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php