Session Related Issue

asmii · August 7th, 2008, 01:27 AM

Hi,

I am using PHP4 and facing an issue regarding session control.

I have a login page login.htm which after taking required details e.g username and password, submits it to submit.php which has the following lines to control a session.

Code:

//submit.php
session_start();

$uid = isset($_POST['uid']) ? $_POST['uid'] : $_SESSION['uid'];
$pwd = isset($_POST['pwd']) ? $_POST['pwd'] : $_SESSION['pwd'];

$_SESSION['lastaccess']= mktime();

After matching it with DB, it redirects to index.htm using header("Location:index.htm");

Now, Index.htm includes a php file called accesscontrol.php which has the following code :

Code:

//accesscontrol.php
session_start();
//header("Cache-control: private");
$newtime=mktime();

$tdiff = $newtime - $_SESSION['lastaccess'];
//echo $tdiff;
if ($tdiff > 900)
{
session_unset();
// Finally, destroy the session.
session_destroy();
exit;
}
else
{
$_SESSION['lastaccess']= mktime();
}

The problem is accesscontrol.php can't access $_SESSION['lastaccess'] which leads to further issues.

Please help.

Thanks in advance.

-Asmii

asmii · August 7th, 2008, 02:08 AM

On accesscontrol.php, $_POST variables are also not accessible.

Code:

$uid = isset($_POST['uid']) ? $_POST['uid'] : $_SESSION['uid'];
$pwd = isset($_POST['pwd']) ? $_POST['pwd'] : $_SESSION['pwd'];

When I checked $uid and $pwd, these are not set.

Thanks.

-Asmii

findajobsearch · October 5th, 2008, 07:06 PM

the $uid $pwd will not be available because you are using redirect and not include

for $_SESSION['lastaccess'];

try using double quote i.e. $_SESSION["lastaccess"];

and check if the your browser supports cookies

easy but not recommended way is to use include in submit.php to include index.php which then includes accesscontrol

thanks

http://FindaJobSearch.com

findajobsearch · October 5th, 2008, 07:07 PM

and if i am not wrong you are using 3rd party hosting which does n't gives access to php.ini so you are trying to control session time out manually

thanks

http://FindaJobSearch.com