login and check they are in

[ceanth]

having some difficulty with this, here is the setup.

page1. html form with username and pass input.

page2. validate username and pass with sql table have link to page 3

page3. check login status.


Now for page 2 i used:
<?
$pass = md5($pass);
include 'db.php';

$sql = "select * from staff where username='$uname' and password='$pass'";
$result = mysql_query($sql);
if(mysql_num_rows($result)!=0)
{ echo "we have a match";
$_SESSION['loggedin']=true;

}
else
{
echo "error";
}

?>


And for page3 i used:

<?
session_start();
if ($_SESSION['loggedin'])
{
echo 'you are logged in ...';
}
else
{
echo 'error';
}
?>

But if i remove the $_SESSION['loggedin']=true; from page 2, page 3 gives me a "you are logged in" message, is there any other simpler way of doing this or am i doing something wrong? Also is there a way of setting an idle time, so say of there isnt any activity for say 2mins then the user is logged out automatically and taken to page1.

Many thanks

ceanth

[pyro]

On page 2, you should be doing something like this:

session_start();
session_register ("loggedin"); 

rather than this:

$_SESSION['loggedin']=true;