Chris, et al --

...and then David T-G said...
% 
% Let me go back over my code and see where I've screwed something up.

That didn't take too long.

I was using SCRIPT_URI instead of PHP_SELF.  Ah.

I guess PHP_SELF is my friend and none other.  Good enough!

So we have

  - use session_start() as usual
  - use $_SESSION for everything (setting and unsetting)
  - don't bother with session_write_close
  - use PHP_SELF
  - do NOT hand-code SID with PHP_SELF :-)

as the Golden Rules for sessions.  Along with the wonderful world of
validating and filtering input that I'm seeing in other threads, is that
all there is to The One True Way of Session Handling?


% 
% % 
% % Chris


Thanks a *bunch* for your patience & HAND

:-D
-- 
David T-G                      * There is too much animal courage in 
(play) [EMAIL PROTECTED] * society and not sufficient moral courage.
(work) [EMAIL PROTECTED]  -- Mary Baker Eddy, "Science and Health"
http://justpickone.org/davidtg/      Shpx gur Pbzzhavpngvbaf Qrprapl Npg!

Attachment: pgp00000.pgp
Description: PGP signature

Reply via email to