session lost after redirect php

Question

first of all, I found several other questions, but nothing helped me so far. Quick question: I lose my session-variables after a redirect. Check this:

Login.php

if(preg_match("/[a-zA-Z]{2}\d{2}/im", $_POST["foo"])) {
    if($_POST["email"]) {
        $aPieces = explode("@", $_POST["email"]);
        if(in_array($aPieces[1], $aAllowedMails)) {
            session_start();
            $_SESSION["isAllowed"] = true;
            header("Location: start.php");
            exit;
        }
    }
}

Start.php

<?php
    // session_start()
    if($_SESSION["isAllowed"] == true) : 
?>
some content

<?php else : ?>

<h1>Acces Denied</h1>

<?php endif ?>

my session is always NULL on the 2nd page (start.php), which leads to the "access denied"-text. Tried to add the 2nd session_start as well on start.php, but that ends up with the error-message:

session_start(): Cannot send session cache limiter - headers already sent > (output started at [path]/start.php:1) in Any ideas?

Jan-Willem de Boer · Accepted Answer · 2017-06-27T14:34:59.787

1

Do you start the session on the next page? If you don't, you can do this by adding this to your code:

<?php session_start(); ?>
<?php
    if($_SESSION["isAllowed"] == true) : 
?>
some content

<?php else : ?>

<h1>Acces Denied</h1>

<?php endif ?>

edited Jun 27 '17 at 14:34

answered Jun 27 '17 at 14:29

Jan-Willem de Boer

797
10
19

tried that, but that leads to the error: session_start(): Cannot send session cache limiter - headers already sent (output started at /var/www/web629/html/personal/sgbdd/start.php:1) in – DasSaffe Jun 27 '17 at 14:31
@DasSaffe you need to be sure that you start your session before you do anything else, so preferably at the top of your code. – Jan-Willem de Boer Jun 27 '17 at 14:32
it basically starts with session_start - check updated question please – DasSaffe Jun 27 '17 at 14:32
@DasSaffe are you sure that there is not any other output before your session starts? Like errors? Try my new code. – Jan-Willem de Boer Jun 27 '17 at 14:34
FFS! you're right... it was a BOM. thank you. Accept asap. thank you – DasSaffe Jun 27 '17 at 14:35

session lost after redirect php

1 Answers1