Sorry to jump in now that you've got it working... BUT:

What's your error_reporting set to?

What's your session.save_path set to in PHP.ini? Does this directory exist? If so, does PHP have permission to write in it? If you look in this directory, do you see any session files in there? Does PHP have permission to read the files created there?


It shouldn't matter that PHP and Apache are installed on one drive and your website exists on another. The key is to make sure that your configuration files make sense for the setup you have.


Take care,

Nik
http://www.bigaction.org/

I use a similar database verification.
But the opasswords are stored in MD5 format (encrypted) and I then translate the entered password (MD5) against the already encrypted stored version. This is more secure than storing passwords in a readable format (depends on how secure you want your app).
If the user forgets their password they can request a temporary one auto-emailed to their login email address.


    // Setup query for username(email)/password check
    $dbquery = "SELECT id, uname, passwd, usergroup, userstatus
                FROM authuser
                WHERE uname = '$username'
                AND
                passwd = md5('$password')";

    $dbresult = mysql_query($dbquery);
    $num_result = mysql_num_rows($dbresult);
    if ($num_result == 0) {
        // If there are no results then they have failed the auth check!