[PHP] Re: headers and session (question)

2005-06-06 Thread JamesBenson
It wont get passed because your not passing it along to the script in anyway, at line 3/4 you set the details into the session, then you redirect them to the login page so in your login.php just call the session variables which you just stored at line 3/4. login.php example: Now when you

[PHP] Re: headers and session (question)

2005-06-06 Thread Matthew Weier O'Phinney
* "Alessandro Rosa" <[EMAIL PROTECTED]>: > Here's below the solution (the encryption will be shortly performed > into login.php). > > 1 2 session_start(); > > 3 $_SESSION['session_user'] = $_POST['txtIdUtente']; > 4 $_SESSION['session_password'] = $_POST['txtPassword']; > > 5 $PHPcmd = "login.php"

[PHP] Re: headers and session (question)

2005-06-06 Thread JamesBenson
I use sessions, I also dont store the users password into the session, if you use flat file sessions on a shared server then storing the password should be avoided, What I do is take a username and password, verify their details against database, if their details match one in database I simply

[PHP] Re: headers and session (2)

2005-06-06 Thread JB05UK
Ahhh, for storing session passwords...if you really need to store a password in the session then try using md5, like so... $psw = md5($_POST['txtPassword']); Then to verify a users password just do the same and compare to the stored md5 value in your database. But, its a very bad idea stori

[PHP] Re: headers and session

2005-06-06 Thread JB05UK
You have two calls to header? The first should be changed to:- session_cache_limiter('private'); http://php.net/manual/en/function.session-cache-limiter.php Alessandro Rosa wrote: Hi to all, I got a problem while storing session variables. After the call to header(...), the values of

[PHP] Re: headers and session

2005-06-06 Thread Matthew Weier O'Phinney
* "Alessandro Rosa" <[EMAIL PROTECTED]>: > Hi to all, > > I got a problem while storing session variables. > > session_start(); > header( "Cache-control: private" ); > > require_once("config.inc.php"); > > > $_SESSION['session_psw'] = $_