Are there any potential pitfalls to be aware of when using session_start() in PHP?

One potential pitfall when using session_start() in PHP is that it must be called before any output is sent to the browser. Failure to do so will result in an error message such as "headers already sent". To solve this issue, ensure that session_start() is the first thing called in your PHP script, before any HTML or whitespace. 

<?php
session_start();
// rest of your PHP code here
?>

Keywords

session_start PHP session variables session hijacking security vulnerabilities

Related Questions