[PHP]Sessions

when i used this script:

PHP Code:

---

<?php
$username = $_POST['username'];
$password = md5($_POST['password']);
mysql_connect("localhost", "ashin951_keydb", "***") or die(mysql_error());
mysql_select_db("ashin951_keydb") or die(mysql_error());
$query = "select * from officer where username='$username' and password='$password'";
$result = mysql_query($query);
if (mysql_num_rows($result) != 1) {
echo "Login failed. Please go back and try again.";
} else {
session_start();
$_SESSION['verify'] = "yes";
include('latestnews.php');
echo "<br><center><h2>Hello $username.</h2><br>";
echo "Please select your destination.<br><br>";
echo "<a href=\"approval.php\">Approval Section</a><br><br>";
echo "<a href=\"logservice.php\">Log Service Section</a><br><br>";
echo "<a href=\"logout.php\">Logout</a></center>";
}
?>

---

it would work fine, however i added it into a template and now it gives me the headers already sent. is there a different way or a way to fix this?

Call session_start early in the script, before you send any output, OR, check out output buffering.

Quote:

---

Originally Posted by andrew951

when i used this script:

PHP Code:

---

<?php
$username = $_POST['username'];
$password = md5($_POST['password']);
mysql_connect("localhost", "ashin951_keydb", "***") or die(mysql_error());
mysql_select_db("ashin951_keydb") or die(mysql_error());
$query = "select * from officer where username='$username' and password='$password'";
$result = mysql_query($query);
if (mysql_num_rows($result) != 1) {
echo "Login failed. Please go back and try again.";
} else {
session_start();
$_SESSION['verify'] = "yes";
include('latestnews.php');
echo "<br><center><h2>Hello $username.</h2><br>";
echo "Please select your destination.<br><br>";
echo "<a href=\"approval.php\">Approval Section</a><br><br>";
echo "<a href=\"logservice.php\">Log Service Section</a><br><br>";
echo "<a href=\"logout.php\">Logout</a></center>";
}
?>

---

it would work fine, however i added it into a template and now it gives me the headers already sent. is there a different way or a way to fix this?

---

Remove the session_start(); and put it on top of your template. (DOCTYPE included.)

ok. thanks a lot.

wait but why did it work when i didnt have a template?

Headers need to be sent before any output what so ever, output is anything that your browser displays.

oh yeah. lol. thanks a lot.

fyi, you need to call session_start(); on every page you wish to use the sessions or you lose them.

For example, if you make an area that requires a login, you can set the session on a successful log in and check for it on each page they must be logged in to see the page. In any case I use sessions I normally make a little include page with a nice initialize function which contains the session_start(); and maybe the session check, and maybe even a db connect. That file would be called at the very top of my file, to make sure I called it before the header.
ok i stop blathering

yes. i understand that. thanks.