SESSION variable placement

[grkblood]

Im trying to figure out a good place to put two session variables that contain the current user and encrypted password so that i can hotlink the app that i entagrated into my board and the users wont have to relog in. i want to place something like

$_SESSION[username]="whatever i should put here to meet the specified query result"
$_SESSION[password]="whatever i should put here to meet the specified query result"

preferably i think the place place would be inside of a function that is already making a query to phpb1_users but I'm not quite sure.

[Sam]

If you integrate phpBB sessions, by including common.php and calling this:

Code: Select all

$user->session_begin();
$auth->acl($user->data);
$user->setup(); 

Now you can access the username by calling $user->data['username'].
Keeping the password in a $_SESSION var is not a particularly good idea, In your other application, it might be easier to integrate phpBB sessions, and force a login from that.

[grkblood]

so data is a pre declared query result already in phpbb or is it being used as a generic term in your example?

[ChaosBringer]

data is a predetermined array based on a query result in the sessions class.

I use a similar system in my own sessions class.