session state help

[dekon]

this is part of the code that i have on my login screen

PHP Code:

$sql="SELECT * FROM user WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword,table is 1 row
if($count==1){

$_SESSION['myusername'] = $myusername;
header("location:.........");
}
else {
echo "Wrong Username or Password";
}
?> 


and this is the other part of the code where i want it so that if a user is not logged in that they will be redirected to the login page to either register their account or login could someone give me some help as to what i'm doing wwong here since it still lets you access the page without being logged on

PHP Code:

<?PHP
session_start();

if(isset($_SESSION['myusername'])){ 
//session is set, user is logged in 
}else{ 
header("location:........."); 
}

?>

[AndrewGSW]

PHP Code:

else { 
    unset($_SESSION['myusername']);
    echo "Wrong Username or Password"; 
} 


..is one way. Or, preferably:

PHP Code:

else {  
    if (isset($_SESSION['myusername'])) {
        unset($_SESSION['myusername']);
    }
    echo "Wrong Username or Password";  
} 


[dekon]

you are still able to open the other page without being logged on since it don't redirect to the login page if not logged in

[dekon]

i managed to get it to redirect but it don't when i type in the correct username and password and click on the page it still redirects me to login page

[EarthToHeaven]

Originally Posted by dekon

this is part of the code that i have on my login screen

PHP Code:

$sql="SELECT * FROM user WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword,table is 1 row
if($count==1){

$_SESSION['myusername'] = $myusername;
header("location:.........");
}
else {
echo "Wrong Username or Password";
}
?> 


and this is the other part of the code where i want it so that if a user is not logged in that they will be redirected to the login page to either register their account or login could someone give me some help as to what i'm doing wwong here since it still lets you access the page without being logged on

PHP Code:

<?PHP
session_start();

if(isset($_SESSION['myusername'])){ 
//session is set, user is logged in 
}else{ 
header("location:........."); 
}

?>

Hi Decon,

1)
Did you try to delete your cookies. press Ctrl + Shift + Del and then re-try same thing.

2)
Also try if($count=='1') instead of if($count==1)

3)
Try to echo your sql queries. This will get you valuable information.

Let me know what happens.

Regards,
Nehal