PHP - Ive Had It With Trying To Get This Cookie To Set! Im Lost

Since I cant undo the MD5 is it safe to say record their password again with out MD5 in the data base and use that to mail them their password if they forgot it?

I'm creating a script and having problems with the log in portion using sessions.  Everything works fine when I set the sessions for the log in which is in the root directory.  The problem arises when I try to create an admin area and cross from the user side to the admin side which is in a different directory of its own.  I do an echo to check for the sessions in admin area and all are lost.

/root <--sessions work 100%

Click link to go to

/root/admin  <--- sessions are lost

and yes all pages have session_start()

Any advice would gladly be appreciated!

Thanks


Here is login code:

<?php
session_start();

include("admin/db/db_connect.php");


$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];


$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM members WHERE user_name='$myusername' and user_pass='$mypassword'";

$result=mysql_query($sql);

$rows=mysql_fetch_array($result);

$status = $rows['status'];
$user_id = $rows['user_id'];

if(($status!="") && ($status==0)){

$m="Your Account has not been activated or is suspended!";

$m = base64_encode($m);

header("location:login.php?m=$m");
exit();
}

$count=mysql_num_rows($result);


if($count==1){



$_SESSION['myusername'] = $myusername;
$_SESSION['myuser_id'] = $user_id;

if($user_id == "1"){

$_SESSION['admin'] = $myusername . $user_id;

}


//echo $user_id . $myusername."<p></p>";

//echo $_SESSION['myusername'] . $_SESSION['myuser_id'] . $_SESSION['admin'];
//exit();

$m="Login Successful!";

$m = base64_encode($m);

header("location:members.php?m=$m");
}
else {

$m="Login Failed, Please Try Again!";

$m = base64_encode($m);

header("location:login.php?m=$m");


}
?>

That works fine for members area and other files in root:
<?php
session_start();
include("inc/vars.php");
include("admin/db/db_connect.php");
include("inc/page_header.php");

if(!isset($_SESSION['myusername'])){
header("location:login.php");
}
?>

<?php 
$m = $_GET['m'];

$m = base64_decode($m);

?>

<?php include("inc/page_footer.php");?>

But it doesn't for this script in admin:

<?php
session_start();

$log = $_SESSION['myusername'];
$in  = $_SESSION['myuser_id'];
$key = $log . $in;

echo "<p>-->". $log . $in ."<--</p>";

echo $key."<-- Key"; 
exit();                 //testing

if($_SESSION['admin'] !== $key){
header("location:/login.php");
}

$ImageDirx = "../sopImages/";

$func = $_GET["func"];
$picid = $_GET["picid"];
$dothis = $_GET["dothis"];

if($func != "" && $picid != "" && $dothis != ""){


   function DoDelete($picid,$dothis) {

        include ("../inc/vars.php");
        include ("db/db_connect.php");
        include ("admin_header.php");

$query ="SELECT * FROM listings WHERE picid='$picid'";
$result = mysql_query($query);
        $row = mysql_fetch_array($result);
        $delete = $row["imagefile"];

        // Delete image from server & DATABASE

        //echo $ImagePth . $delete;exit();

$sql = "DELETE FROM listings WHERE picid='$picid'";
$result = mysql_query($sql);

        @unlink($ImagePth . $delete);

   }

   function DoStatusC($func,$picid,$dothis) {

        include ("../inc/vars.php");
        include ("db/db_connect.php");
        include ("admin_header.php");

if($func == hold){ $Nactive = "n"; }
else{ $Nactive = "y";}


$query ="SELECT * FROM listings WHERE picid='$picid'";
$result = mysql_query($query);

$myrow = mysql_fetch_array($result);

$picid = $myrow["picid"];
$active = $myrow["active"];

$sql ="UPDATE listings SET active='$Nactive' WHERE picid='$picid'";
$result = mysql_query($sql);

   }

   if($func == "delete"){ DoDelete($picid,$dothis); }
   else { DoStatusC($func,$picid,$dothis); }

}

if (empty($_GET["dothis"])) { shownew(); Die(); }
else {$dothis = $_GET["dothis"];}

if($dothis == "echonew"){shownew(); die();}
elseif($dothis == "echoactive"){showactive(); die();}
elseif($dothis == "echoall"){showall(); die();}
elseif($dothis == "resetDB"){DoresetDB(); die();}


  // Retrieve all images from the db
function showall() {

  include("../inc/vars.php");
  include ("db/db_connect.php");
  include ("admin_header.php");


  $query = "SELECT * FROM listings ORDER BY id DESC";
  $result = mysql_query($query);
  $num = mysql_num_rows($result);
  if ($num == "0") {print("No Results");include("admin_footer.php"); die();}
  if ($num < "20") {$Xwarning = "WARNING: There are not enough images for this script to work correctly.<br>";}
  print("<font color='red'>$Xwarning</font>");
  print("<font color='blue'>$num</font> Image(s)<br>");
  if($num > 0){

    $i=0;

    echo "";
    while($i < $num){

      $id = mysql_result($result, $i, "id");
      $owner_id = mysql_result($result, $i, "owner_id");
      $picid = mysql_result($result, $i, "picid");
      $imagename = mysql_result($result, $i, "imagename");
      $imagefile = mysql_result($result, $i, "imagefile");
      $active = mysql_result($result, $i, "active");

        $query2 ="SELECT * FROM members WHERE user_id='$owner_id'";
$result2 = mysql_query($query2);
        $myrow2 = mysql_fetch_array($result2);
        $name = $myrow2["user_name"];

      if ($active == "n") {$status = "Hold";}
      else {$status = "Active";}
      if ($active == "n") {$statusL = "<a href=\"inedx.php?func=allow&picid=$picid&dothis=echoall\">Click to Allow</a>";}
      else {$statusL = "<a href=\"index.php?func=hold&picid=$picid&dothis=echoall\">Click to Hold</a>";}
      echo "<table border=\"0\" cellspacing=\"1\" style=\"border-collapse: collapse\" bordercolor=\"#111111\" width=

\"585\">
      <tr><td width=\"237\"><img src='../i.php?src=/".$ImageDir."".$imagefile."&amp;h=&amp;w=150&amp;zc=0'></td>
      <td width=\"341\" valign=\"top\"><b>Submitted By:</b> <a href=\"member.php?user_id=".$owner_id."\">".

$name."</a><br><b>Website:</b> ".$website."<br><b>Image Name:</b> ".$imagename."<br><b>Status:</b> ".$status."<br><br><a 

href=\"index.php?func=delete&picid=$picid&dothis=echoall\">Delete</a> | ".$statusL."</td>
    </tr>\n</table><hr color=\"#0000FF\" align=\"left\" width=\"570\" size=\"1\">";

      $i++;
    }
    echo "";
  }
include("admin_footer.php");
}

function shownew() {
  // Retrieve all new images from the db

  include("../inc/vars.php");
  include ("db/db_connect.php");
  include ("admin_header.php");

  $query = "SELECT * FROM listings WHERE active='n' ORDER BY id DESC";
  $result = mysql_query($query);
  $num = mysql_num_rows($result);
  if ($num == "0") {print("No Results"); include("admin_footer.php"); die();}
  print("<font color='blue'>$num</font> Image(s)<br>");
  if($num > 0){

    $i=0;

    echo "";
    while($i < $num){

      $id = mysql_result($result, $i, "id");
      $owner_id = mysql_result($result, $i, "owner_id");
      $picid = mysql_result($result, $i, "picid");
      $imagename = mysql_result($result, $i, "imagename");
      $imagefile = mysql_result($result, $i, "imagefile");
      $active = mysql_result($result, $i, "active");

        $query2 ="SELECT * FROM members WHERE user_id='$owner_id'";
$result2 = mysql_query($query2);
        $myrow2 = mysql_fetch_array($result2);
        $name = $myrow2["user_name"];

      if ($active == "n") {$status = "Hold";}
      else {$status = "Active";}
      if ($active == "n") {$statusL = "<a href=\"index.php?func=allow&picid=$picid&dothis=echonew\">Click to Allow</a>";}
      else {$statusL = "<a href=\"index.php?func=hold&picid=$picid&dothis=echonew\">Click to Hold</a>";}
      echo "<table border=\"0\" cellspacing=\"1\" style=\"border-collapse: collapse\" bordercolor=\"#111111\" width=

\"585\">
      <tr><td width=\"237\"><img src='../i.php?src=/".$ImageDir."".$imagefile."&amp;h=&amp;w=150&amp;zc=0'></td>
      <td width=\"341\" valign=\"top\"><b>Submitted By:</b> <a href=\"member.php?user_id=".$owner_id."\">".

$name."</a><br><b>Website:</b> ".$website."<br><b>Image Name:</b> ".$imagename."<br><b>Status:</b> ".$status."<br><br><a 

href=\"index.php?func=delete&picid=$picid&dothis=echonew\">Delete</a> | ".$statusL."</td>
    </tr>\n</table><hr color=\"#0000FF\" align=\"left\" width=\"570\" size=\"1\">";

      $i++;
    }
    echo "";
  }
include("admin_footer.php");
 }

function showactive(){
  // Retrieve all Active images from the db
  include("../inc/vars.php");
  include ("db/db_connect.php");
  include ("admin_header.php");


  $query = "SELECT * FROM listings WHERE active='y' ORDER BY id DESC";
  $result = mysql_query($query);
  $num = mysql_num_rows($result);
  if ($num == "0") {print("No Results");include("admin_footer.php"); die();}
   if ($num < "20") {$Xwarning = "WARNING: There are not enough images for this script to work correctly.<br>";}
  print("<font color='red'>$Xwarning</font>");
  print("<font color='blue'>$num</font> Image(s)<br>");
  if($num > 0){

    $i=0;

    echo "";
    while($i < $num){

      $id = mysql_result($result, $i, "id");
      $owner_id = mysql_result($result, $i, "owner_id");
      $picid = mysql_result($result, $i, "picid");
      $imagename = mysql_result($result, $i, "imagename");
      $imagefile = mysql_result($result, $i, "imagefile");
      $active = mysql_result($result, $i, "active");

        $query2 ="SELECT * FROM members WHERE user_id='$owner_id'";
$result2 = mysql_query($query2);
        $myrow2 = mysql_fetch_array($result2);
        $name = $myrow2["user_name"];

      if ($active == "n") {$status = "Hold";}
      else {$status = "Active";}
      if ($active == "n") {$statusL = "<a href=\"index.php?func=allow&picid=$picid&dothis=echoactive\">Click to 

Allow</a>";}
      else {$statusL = "<a href=\"index.php?func=hold&picid=$picid&dothis=echoactive\">Click to Hold</a>";}
      echo "<table border=\"0\" cellspacing=\"1\" style=\"border-collapse: collapse\" bordercolor=\"#111111\" width=

\"585\">
      <tr><td width=\"237\"><img src='../i.php?src=/".$ImageDir."".$imagefile."&amp;h=&amp;w=150&amp;zc=0'></td>
      <td width=\"341\" valign=\"top\"><b>Submitted By:</b> <a href=\"member.php?user_id=".$owner_id."\">".

$name."</a><br><b>Website:</b> ".$website."<br><b>Image Name:</b> ".$imagename."<br><b>Status:</b> ".$status."<br><br><a 

href=\"index.php?func=delete&picid=$picid&dothis=echoactive\">Delete</a> | ".$statusL."</td>
    </tr>\n</table><hr color=\"#0000FF\" align=\"left\" width=\"570\" size=\"1\">";

      $i++;
    }
    echo "$warning";
  }
include("admin_footer.php");
}
?>

kinda new in php so hope somebody can help me im about to get mad with this
i have 2 pages index.htm and list_tbl.php
in the index.htm i have a textbox so the customers write what they want to find in my site with a search button like this :

<form id="form1" name="form1" method="post" action="list_tbl.php" target="_blank">

in the list_tbl.php is like this

<?php
$srch = $_POST['prod_search'];
$se = "%";
'$all' = $se.$srch.$se;
$msj="You look for : ";
$msj2=$mensaj.$srch;
$regis="   your search match :";
$regis2=" Items";

$conn = mysql_connect('localhost','root','pass') or trigger_error("tbl_die", E_USER_ERROR);
.
.
.
.
.
works fine if i write 4 example "blue metal" in the index the php page get me

You Look for blue metal  Your search match XX items

but if the filter get more then 1 page when i clik in the next link the filter is gone
the "blue metal" string is lost and i have all the items in the table

why the $_post Value is lost after paginate???

1000 TNX

Okay I am a beginner and haven't coded in months. I am trying to find a tutorial or help figuring out how to build a lost password script for user log-in system I built a while ago.

Can anyone help with either something that works that I can learn from, a tutorial somewhere?

thanks
Tim

Hello all, I just wrote a php website to communicate with a database and it has a login based on the users email and password, they login on the first page and then the php checks for every page they visit if they indeed logged in before and not just found out what php file to open to get where they want to be. For this I used session variables to store both e-mail and password. The login info gets posted from the 1st(login) site to the 2nd site where it is checked for the first time, after that the login info isn't posted to the next page anymore, but just checked, this works for the 3rd page but when the user hits for the 4th page the variables are lost(I can't echo them either). However if I'd go from the 2nd page directly to the 4th page the page will load, however the 5th will then get my security-msg. So offcourse, I am wondering how this might have happened and how to fix this problem, here's some of the code I wrote:

This is the check for the logininfo:

<?php
include('SessionStart.php');
include('logindata.php');

$db = mysql_connect($host, $user, $pw);

if (!$db)
{
   echo "<br />Helaas, u heeft geen verbinding met de database.";
   exit();
} else
{
   mysql_select_db("teammanagementtool", $db);
   
$sql24 = "SELECT * FROM leidinggevenden";
$allesarray = mysql_query($sql24);

$i = 0;
while ($mails = mysql_fetch_array($allesarray)) {
   $mailtjes[$i] = $mails['lg_mailadres'];
   $i = $i+1;
}
   
   echo "...".$_SESSION['sessie']['email']."...".$_SESSION['sessie']['password']."...".$session_name."...";
   
if (in_array($_SESSION['sessie']['email'],$mailtjes)) {

   $sql25 = "SELECT lg_wachtwoord FROM leidinggevenden WHERE lg_mailadres = '".$_SESSION['sessie']['email']."'";
   $pass = mysql_query($sql25);
   $pasje = mysql_fetch_array($pass);
   if ($_SESSION['sessie']['password'] != $pasje['lg_wachtwoord']) {
      echo "<script>alert('U bent hier op incorrecte manier terecht gekomen!');</script>";
      echo "<meta http-equiv='refresh' content='0;URL=index.php' />";
      exit();   
   } else if ($_SESSION['sessie']['password'] = "" || $_SESSION['sessie']['email'] = ""){
      echo "<script>alert('U bent hier op incorrecte manier terecht gekomen!');</script>";
      echo "<meta http-equiv='refresh' content='0;URL=index.php' />";
      exit();   
   } else {
   }
} else {
   echo "<script>alert('U bent hier op incorrecte manier terechtgekomen!');</script>";
   echo "<meta http-equiv='refresh' content='0;URL=index.php' />";
   exit();   
}

?>

And this is the code in my SessionStart.php:

<?php
$session_name = 'sessie';
$session_exp_time = 10000 ;

$previous_name = session_name($session_name);

ini_set('session.gc_maxlifetime',   $session_exp_time);
ini_set('session.gc_probability', '1');
ini_set('session.gc_divisor', '1000');
ini_set('session.name', $session_name);
ini_set('session.cookie_domain', '');
ini_set('session.cookie_lifetime', 0 );
 
session_set_cookie_params($session_exp_time, '/', '');
session_start();

if (isset($_COOKIE[$session_name]))
setcookie($session_name, $_COOKIE[$session_name], 2147483647 , '');
?>

the includes are at the start of all of my pages, I only do a session_unset() at my index.php(the login page).
and my 2nd page gets:
$_SESSION['sessie']['email'] = $_POST['email'];
$_SESSION['sessie']['password'] = $_POST['password'];
from the login.

I could really use some help here, thanks in advance.

Hi- I've got a few simple forms on my site that get relayed over to our email server when the submit button is hit.  The forms, in turn, get emailed to the predetermined recipients from that mail server.  It's been working great for years, but we changed our mail server recently and didn't point the php.ini config to the new server and we've missed some form submissions for a few days (I know, I know).  Looking at the PHP error log, I've got about 140 "PHP Warning:  mail() [<a href='function.mail'>function.mail</a>]: SMTP server response: 530 5.7.1 Client was not authenticated in " entries, which tells me we missed 140 form submissions.  My question is: is there any way to retrieve these form submissions?  Are they sitting someplace on my site that I can extract them from?  Do they literally just disappear if they can't get to the SMTP server? Many thanks in advance for any responses!

Hello all,

i'm attempting to implement i18n into my project.
so I read some tutorials, copied some code and eventually made the following:
Code: [Select]
/**
* applyMultiLingual uses the gettext module from PHP to support multilingual
* @param Array $settings
*/
private static function applyMultiLingual($settings){
/* init global config */
bindtextdomain(self::$project_name,Config::path('i18n'));
bind_textdomain_codeset(self::$project_name, 'UTF-8');
textdomain(self::$project_name);

if(!array_key_exists('enabled', $settings) || $settings['enabled'] == false){
//initiate default (english)
putenv("LC_MESSAGES=en_EN");
setlocale(LC_MESSAGES,'en_EN');
}
else{
if(Session::language() === null){
//initiate custom
if($settings['default'] == 'auto'){ locale::acceptFromHttp($header); }
else{ putenv("LC_MESSAGES=".$settings['default']);setlocale(LC_MESSAGES,$settings['default']); }
}
else{
putenv("LC_MESSAGES=".Session::language());
setlocale(LC_MESSAGES,Session::language());
}
}
}

The code is (imo) pretty readable, so it sets the textdomain to "project1", and the current language to en_EN.
if should search for the translations in DOC_ROOT/i18n/

now, it returns the text between the _(); functions, but I get no translation files in said directory, and I also have no clue how to accomplish this.

so what I want to accomplish is this:
enable use of function _(), which saves all translations in a folder i18n, and subfolder LOCALE_CODE (ex. DOC_ROOT/i18n/en_EN/messages.po).

what am I doing wrong, and how can I fix it?

thanks to any who can help, and if more info is needed, ask and you shall receive.

hello everyone....i need your help

i face session lost problem so many times and every times i just find out other logic to implement the code in different ways. but i don't get a perfect solution.Please help me to resolve this............why it was happened.....
i searched google for it.........this is the common problem but i dont get any proper solution..............

recently i write a code to fetch tweets from twitter..but when returning back from .i lost my session value.........

supp this is my page page.php
when user click on button........i just check the form submitted like this
session_start();
$_SESSION['id']=$id;      //supp $id=10
if($_POST['submit'])
{
  header("Location:tweet.php ");
}
i already included session_start() at the top of every page.

in tweet.php i just generate a token and send user to twitter for authorization.

in tweet.php i checked session started
i check it with
Print_r($_SESSION);
in this page i used session like this
session_start();
if($_SESSION['id'])
{
header("Location:$url")       //$url will be authoritarian url generated by twitter oauth..
}else
{
header("Location:index.php")
}

after returning from twitter some times session variable are not lost.but sometimes i lost my session.this really irritates me....if logic is wrong then every time session destroyed...............

i check my php.ini file configuration..

session_save.path=/tmp;  //by default

register global are off.................

any help is appreciated................

Well i have a session['rmanr'] a have set after a submit containing the date and unique id. I have to be able to do multiple submits on that same form but if they submit multiple times the same rmanr have to be used...   I tried the following:

$date         = date("Y-m-d");
$datestrip    = str_replace("-",  "", $date);
$lastdetid     = $dbh->lastInsertId();
if(!isset($_SESSION['rmamr'])){
            $rmanr                   = $datestrip;
            $rmanr                  .= $lastdetid;
            $_SESSION['rmanr']       = $rmanr;
        } else {
            $rmanr                   = $_SESSION['rmanr'];
        }

    $uprmastmt = $dbh->prepare("UPDATE rma SET r_nr = '$rmanr' WHERE r_id = ?");
    $uprmastmt->bindParam(1, $lastid);
    $uprmastmt->execute();

But i keep getting a new rmanr every time i submit... Could it be that my form submit reset my SESSION?

I need to come up with a better way to do this. Currently I have a script which is a form and the user enters their email address, and their password in the database is sent to the email address. Problem is the password is MD5 hashed, so it's hashed when sent to their email. I am sure there is a better way to do this. Also, I am capturing a Security Question and Answer in the initial profile form that the user fills out, so I need to incorporate this as an extra layer of security. Please let me know of the methods for doing this.

Thanks in advance!

say if I had a black page with a background or something simple and it had no content except for a link called "about us"
and I wanted that link to be located at the bottom left side of the page but since it has no content its stuck up the top unless <br> or <p> is introduced.
how could this be done without spamming <br /><p><br /> untill im happy with its location and if content is added it gets boosted down further with a massive gap ><

Hi!

I need a little bit coding help here.
I have a table:
Numbers, Active

Under numbers can be 10000, 10001, 10002, 10003, 10004, 10005 and active can be 1 or 0, depends on is this row active or not.
Now, i need to check, is there any numbers lost, i mean, (for example) in table i have numbers 10002, 10000 and 10005 Can somebody make script, what finds those lost numbers, in this case those a 10001, 10003 and 10004.

All the best:
Mart

   I have over 230 files plus 39 directories ( 3.5Mb ) in my public_html directory and I am looking for where I specified/declared the contents of a variable!  I can't for the life of me remember in which web page/directory I set up the contents of that run time variable.  ( It was three years ago! )
Can anyone advise me how find that data variable  ( Its called $depositrules )?

how to tell gmail to send plan messages only

i want to send my friend a pgp-crypted mail - but this fails since the html-based mails allways do some changes to the pgp

my friend receives the mails in a broken style
they are not readable any more

plz advice me - any and all help is much appreciated

by the way i use kgpg and the editor to create the crypted message.
i do not like the enigmail-addon for tbird. +
But if i should try this - : Which credentials are needed to configure the einigmail - the public key that i have generated recently.

love to hear from you

greetings

I'm trying to rewrite the old jpmaster77 login script that I used back in the day quite extensively, but I'm having problems getting the $form->error messages to the correct page.   Login form, on the index.php:

          <div>
            <h3>Login</h3>
            <form method="post" action="process.php" id="sublogin">

                  /* error message should be displayed here when username is empty or == username */
                  <p>
                  <?php
                  echo $form->error("user");
                  ?>

                  <input class="loginside" type="text" name="user" value="username" /> ?> <br />
                  <input class="loginside" type="password" name="pass" value="password" /> <br />
                  <input type="hidden" name="sublogin" value="1">
                  <input type="checkbox" name="remember">Remember me <br />
                  <input class="sublogin" type="submit" value="login" style="border: 0; margin: 5px 0 0 1px;" />
              </p>
            </form>
            Not registered yet? Sign up here!
          </div>

process.php

class Process
{
   /* Class constructor */
   function Process(){
      global $session;
      /* User submitted login form */
      if(isset($_POST['sublogin'])){
      	      	
      	      	
				$this->procLogin();
        
      }

      /**
       * Should not get here, which means user is viewing this page
       * by mistake and therefore is redirected.
       */
       else{
          header("Location: index.php");
       }
   }
   
   function procLogin(){
   
      global $session, $form;
      /* Login attempt */
      $_POST = $session->cleanInput($_POST);
      $retval = $session->login($_POST['user'], $_POST['pass'], isset($_POST['remember']));
      
		if($retval){
			header("Location: correct.php");
		}
		else{
		$_SESSION['value_array'] = $_POST;
                $_SESSION['error_array'] = $form->getErrorArray();
                header("Location: index.php");
		}

                /* if instead the $_SESSION and header I enter echo $form->error("user")
                   then the error message is displayed in process.php, and not in index.php
                */
   }

   
 }
 
$process = new Process;

?>

But when instead the $_SESSION and the header location I enter here echo $form->error("user"); then all is fine. But the error message should not be displayed in the process.php, but rather above the login form on the index.php



session.php
 

<?php

include "database.php";
include "form.php";

class Session

{
		var $time;
		
		function Session(){
			
			$this->time = time();
			$this->startSession();
			
		}
		
		function startSession(){
			
			$session_name = 'sec_session_id';   // Set a custom session name
	    $secure = true;
	    
	    // This stops JavaScript being able to access the session id.
	    $httponly = true;
	    
	    // Forces sessions to only use cookies.
	    if (ini_set('session.use_only_cookies', 1) === FALSE) {
	        header("Location: ../error.php?err=Could not initiate a safe session (ini_set)");
	        exit();
	    }
	    
	    // Gets current cookies params.
	    $cookieParams = session_get_cookie_params();
	    session_set_cookie_params($cookieParams["lifetime"],
	    $cookieParams["path"], 
	    $cookieParams["domain"], 
	    $secure,
	    $httponly);
	        
	    // Sets the session name to the one set above.
	    session_name($session_name);
	    session_start();           		 	// Start the PHP session 
	    session_regenerate_id(true);    // regenerated the session, delete the old one. 
		}		
		

		function login($subuser, $subpass, $subremember)
		{
			global $database, $form;
				
			/* username check */
			$field = "user";
			if(!$subuser || $subuser == "username")
			{
            $form->setError($field, "* Username incorrect");
			}

			/* password check */
			
			/* if e-mail welcome, check if user activated account */
      	
     	/* Return if form errors exist */
      if($form->num_errors > 0){
         return false;
      }	
      
      return true;
      
		}

		
		function cleanInput($post = array()) {
       foreach($post as $k => $v){
            $post[$k] = trim(htmlspecialchars($v));
         }
         
         return $post;
   	}
			
};

$session = new Session;
$form = new Form;

?>

form.php
 

<?php 
/**
 * Form.php
 *
 * The Form class is meant to simplify the task of keeping
 * track of errors in user submitted forms and the form
 * field values that were entered correctly.
 *
 * Written by: Jpmaster77 a.k.a. The Grandmaster of C++ (GMC)
 * Last Updated: August 19, 2004
 */
 
class Form
{
   var $values = array();  //Holds submitted form field values
   var $errors = array();  //Holds submitted form error messages
   var $num_errors;   //The number of errors in submitted form

   /* Class constructor */
   function Form(){
      /**
       * Get form value and error arrays, used when there
       * is an error with a user-submitted form.
       */
      if(isset($_SESSION['value_array']) && isset($_SESSION['error_array'])){
         $this->values = $_SESSION['value_array'];
         $this->errors = $_SESSION['error_array'];
         $this->num_errors = count($this->errors);

         unset($_SESSION['value_array']);
         unset($_SESSION['error_array']);
      }
      else{
         $this->num_errors = 0;
      }
   }

   /**
    * setValue - Records the value typed into the given
    * form field by the user.
    */
   function setValue($field, $value){
      $this->values[$field] = $value;
   }

   /**
    * setError - Records new form error given the form
    * field name and the error message attached to it.
    */
   function setError($field, $errmsg){
      $this->errors[$field] = $errmsg;
      $this->num_errors = count($this->errors);
   }

   /**
    * value - Returns the value attached to the given
    * field, if none exists, the empty string is returned.
    */
   function value($field){
      if(array_key_exists($field,$this->values)){
         return htmlspecialchars(stripslashes($this->values[$field]));
      }else{
         return "";
      }
   }

   /**
    * error - Returns the error message attached to the
    * given field, if none exists, the empty string is returned.
    */
   function error($field){
      if(array_key_exists($field,$this->errors)){
         return "<font size=\"2\" color=\"#ff0000\">".$this->errors[$field]."</font>";
      }else{
         return "";
      }
   }

   /* getErrorArray - Returns the array of error messages */
   function getErrorArray(){
      return $this->errors;
   }
};
 
?>

Does anyone know why the $form->error("user") variable cannot be transfered to the index.php? Is something wrong with the session_start or something?

thanks in advance guys!
Edited by dde, 07 January 2015 - 03:49 PM.