What are common mistakes to avoid when using PHP sessions?

One common mistake to avoid when using PHP sessions is not calling session_start() at the beginning of each page where you want to access session variables. This function initializes a session or resumes the current one based on a session identifier passed via a GET or POST request, or passed via a cookie. It is necessary to call session_start() before accessing any session variables to ensure that the session is properly started and available for use. 

<?php
session_start();

// Access session variables
$_SESSION['username'] = 'JohnDoe';
?>

Keywords

session_start session_regenerate_id session_destroy session fixation session hijacking

Related Questions