"session validation checking" in html page ...HELP

dragon · #1 (**permalink**) 08-12-2006, 06:57 PM

hey all,

I have a question about checking session in html page:
The variables that is sent through all pages is "user logged in name",and the session name is =username as well,

I added a php condition in html page to check if the session variable was null (null if anybody tried to access without logging in) or not>>if yes redirect to login page else view the page....but its not working properly :S
the goal is no user will be able to access this html directly without logging in.

piece from the code:

HTML Code:

<?php
session_start();
if(! $_SESSION['ses_name']){
  header("Location: http://home/project/login.html");
exit;
                               }
?>

<html>
<head>
<title>Insert record</title>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css">
<!--
body {
	background-color: #EEEEEE;
}

hope I'll find some help,

Till · #2 (**permalink**) 08-14-2006, 11:01 AM

Looking good!

Also, if you are checking or "null", use is_null(). By the way, since I think you will need those next - there's also isset() and empty().

Cheers,
Till

P.S.
Make sure to fix the redirecting link before you put it online.

Till · #3 (**permalink**) 08-14-2006, 11:02 AM

I totally forgot, use this to check what is in $_SESSION (after session_start()):

PHP Code:


			
echo '<pre>'; var_dump($_SESSION); echo '</pre>';

dragon · #4 (**permalink**) 08-15-2006, 01:58 PM

hey Till,

PHP Code:


			
echo '<pre>'; var_dump($_SESSION); echo '</pre>';

It did print the session name...but the code is not working ...I mean even if the session name was null it allows the access.

PHP Code:


			
<?php

session_start();

if(is_null()){

  header("Location: http://home/project/login.html");

exit;

                               }

?>

Not working I can access the page without logging in

thanx

Till · #5 (**permalink**) 08-15-2006, 02:06 PM

PHP Code:


			
<?php

session_start();

if(is_null($_SESSION['ses_name']))

{

  header("Location: http://home/project/login.html");

  exit;

}

?>

But I would use:

PHP Code:


			
<?php

session_start();

if(!isset($_SESSION['ses_name']) || is_null($_SESSION['ses_name']))

{

  header("Location: http://home/project/login.html");

  exit;

}

?>