Authenticating a user using sessions with PHP -

Authenticating a user using sessions with PHP -

i have setup session code not seem working!

on login verification script post request login form, code following.. if( isset($_post['email']) && isset($_post['password']) ) { // perform lookup $sql = "select * authentication email='" . $email . "';"; $query = mysqli_query($conn,$sql); $fetch = mysqli_fetch_assoc($query); $fetched = $fetch['email']; if($fetched == $email) { // auth okay, setup session $_session['user'] = $_post['email']; // redirect required page header( "location: app.php" ); } else { // didn't auth go loginform //header( "location: fail.html" ); die("failed auth."); } } else { // username , password not given go login //header( "location: loginform.html" ); die("no username or password given"); } ?>

on "secure" page in top..

<?php session_start(); session_regenerate_id(); if(!isset($_session['user'])) // if there no valid session { header("location: index.php?message=notauthed"); } require 'includes/header.php'; $name = $_session['user']; ?>

on log-out script in place..

<?php session_start(); unset($_session['user']); session_destroy(); header("location: index.html"); ?>

woops totally forgot include issues haha :)

login script works, redirects fine.

after logging in, unable echo $name = $_session['user'];

also, when log out still able access app page.

also** running on php 5.3? think. not latest, hostgator php..

try:

<?php session_start(); session_unset($_session['user']); header("location: index.html"); ?>

this method not best because clears contents of variable not session self so, if seek check 1 time again still going nowadays instead seek this:

<?php session_start(); session_destroy(); header("location: index.html"); ?>

hope helps.

php session authentication