Member System Problem

[Stroobie]

Well, I downloaded the members system script, and it all works fine except for when someone logs in correctly, it just appears as a blank page. I have got a member.php page, but it's not going to it after someone logs in.

Does anyone know how to solve this?

Thanks.

[scrowler]

is it completely blank? nothing at all shows up?

try running phpinfo():

<?=phpinfo()?>

and have a look to see if your server has sessions enabled. also check register_globals to see if it is on or off (should be on).

[Stroobie]

Session Support enabled
Registered save handlers files user

Directive Local Value Master Value
session.auto_start Off Off
session.bug_compat_42 On On
session.bug_compat_warn On On
session.cache_expire 180 180
session.cache_limiter nocache nocache
session.cookie_domain no value no value
session.cookie_lifetime 3600 3600
session.cookie_path no value no value
session.cookie_secure Off Off
session.entropy_file /dev/urandom /dev/urandom
session.entropy_length 16 16
session.gc_divisor 100 100
session.gc_maxlifetime 1200 1200
session.gc_probability 0 0
session.name PHPSESSID PHPSESSID
session.referer_check no value no value
session.save_handler files files
session.save_path 2;/data/session 2;/data/session
session.serialize_handler php php
session.use_cookies On On
session.use_only_cookies Off Off
session.use_trans_sid Off Off


Thats the php session information, it says session support is on. Also, where do I check the register globals? Sorry, I'm a bit new to php :$


edit; I can show you a demo if you like.
http://members.lycos.co.uk/stroobie/login.php
The password & username is demo

[Man1c M0g]

register_globals is in php.ini. If you are running linux you can usually find that in /etc/phi.ini or somewhere close to that.

Note to scrowler: Is there any way of running your script without register_globals on? Its a bit prone to security breaches, and the PHP creators recommend that its turned off.

[Order]

Instead of using $var as globals for POST and GET's, use $_POST and $_GET instead, that is the workaround and proper coding methods.

[scrowler]

my code does use the post and get superglobals as far as i know... i have no idea why that would just die like that... i dont think that having register globals off would make a difference but it might, might be interesting to trial on an old server one day

[Man1c M0g]

I use $_REQUEST myself. Heh... I guess its just personal preference.

[BlodoPKNZ]

Lol therefore i can haxx0r your scripts Using request is a security failure, i can take over a post variable using the uri, and im sure you wouldnt want someone malicious (who me? ) to do something bad init