Session-based Login System Help

#1 Hunter100

CC Addict

Advanced Member
292 posts

Programming Language:C, C++, PHP, Python, Delphi/Object Pascal, Assembly
Learning:Python, Assembly, Bash

Posted 26 March 2011 - 07:35 PM

Hello all,

I've been working on a login system for my website for ages now. I've just finished modifying the UI and decided to get back to work on the login system.

I have a problem. To access the session variables (i.e. starting the session) I use the

session_start();

function, however, it returns these two errors:

Warning: session_start() [
FUNCTION.SESSION-START
]: Cannot send session cookie - headers already sent by (output started at /home/brezerd1/public_html/index.php:2) in /home/brezerd1/public_html/template.php on line 3

Warning: session_start() [
FUNCTION.SESSION-START
]: Cannot send session cache limiter - headers already sent (output started at /home/brezerd1/public_html/index.php:2) in /home/brezerd1/public_html/template.php on line 3

Even though, I'm running session_name before it. The session is being set by login_success.php (which occurs if checklogin.php validates the login).

Basically, I'm trying to keep the user logged in for all pages (until they log out of course).

I'd appreciate some help on this one, as it's been bugging me for a while.

Thanks.

Recommended for you: Get network issues from WhatsUp Gold. Not end users.

#2 Orjan

CC Mentor

Moderator
2918 posts

Location:Karlstad, Sweden
Programming Language:C, Java, C++, C#, PHP, JavaScript, Pascal
Learning:Java, C#

Posted 27 March 2011 - 11:26 AM

session_start() needs to be ran before anything is echoed, printed or any html is sent to the browser. what is your code?

I'm a System developer at XLENT Consultant Group mainly working with SugarCRM.
Please DO NOT send mail or PM to me with programming questions, post them in the appropriate forum instead, where I and others can answer you.

#3 Upstream

CC Resident

Advanced Member
98 posts

Location:Netherlands
Programming Language:C, C++, PHP, (Visual) Basic, JavaScript, Perl, Bash, Others
Learning:Others

Posted 27 March 2011 - 12:27 PM

And the same holds true for the use of header() and settig cookies. I good article on creating a secure login with, sessions/session checking and a remeber user function can be found here:

PHP - Creating a Secure PHP Login Script - Dev Shed

#4 Upstream

CC Resident

Advanced Member
98 posts

Location:Netherlands
Programming Language:C, C++, PHP, (Visual) Basic, JavaScript, Perl, Bash, Others
Learning:Others

Posted 27 March 2011 - 12:32 PM

And the same is true for header() and setting cookies. I found this tutorial PHP - Creating a Secure PHP Login Script - Dev Shed very useful on secure login scripts with sessions/session checking and remember me function.

#5 Hunter100

CC Addict

Advanced Member
292 posts

Programming Language:C, C++, PHP, Python, Delphi/Object Pascal, Assembly
Learning:Python, Assembly, Bash

Posted 27 March 2011 - 07:04 PM

Well, I'm opening my PHP

<?php

Then, I'm running

session_start();

Then I'm echoing some stuff.

So basically, That is the first thing I'm doing on every page!

Besides HTML comments, however I've tried moving them to no help.

I'll check out that tutorial.

#6 null

CC Addict

Advanced Member
128 posts

Posted 27 March 2011 - 07:08 PM

session_name

doesn't have to be called before you set the session. Code before

session_start()

is obviously the problem here. Have you checked that you have not sent ANY output to the browser, including HTTP headers. Check all your usages of

session_start()

and try to find any code before it. If you are using a

include('')

check if there is any code being outputted before this. Also remember that

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">

counts as well.

General Forums → Mobile Development → html5 web storage session login Started by mutago, 11 May 2014 session	1 reply 1693 views	mutago 13 May 2014
Language Forums → PHP → need some help in converting this code from mysl to pdo Started by NanaKwekuDenise, 14 Mar 2014 mysql, pdo, login, sql, injection	1 reply 4270 views	Alexander 24 Mar 2014
General Forums → General Programming → Providing web resources only to authenticated users Started by Kaishain, 01 Feb 2014 security, login, authentication and 3 more...	4 replies 7361 views	Kaishain 03 Feb 2014
Language Forums → PHP → PHP Session VS. Session isset Started by Serialcek, 31 Jan 2014 php, session	2 replies 1839 views	Serialcek 31 Jan 2014
General Forums → General Programming → Preventing Session Hijacking? Started by Pally, 20 Dec 2013 prevent, session, hijacking	3 replies 2845 views	Vaielab 21 Dec 2013

Recent Topics

Recent Blog Entries

Recent Status Updates

Popular Tags

#1 Hunter100

#2 Orjan

#3 Upstream

#4 Upstream

#5 Hunter100

#6 null

Also tagged with one or more of these keywords: session, login

html5 web storage session login

need some help in converting this code from mysl to pdo

Providing web resources only to authenticated users

PHP Session VS. Session isset

Preventing Session Hijacking?

Recent Topics

Recent Blog Entries

Recent Status Updates

Popular Tags

Session-based Login System Help

Also tagged with one or more of these keywords: session, login

Sign In