So header.php includes session.php, and nothing else?
What of these, do any of these include session.php or header.php?
The easiest fix is to simply use _once functions on the include/requires. No matter where its from, this file has been included more than once.
You should consider upgrading this code from 4.x compatible OO to 5.x OO as well.