未保存会话

所以我的php登录脚本出现了一个愚蠢的问题。我注意到，当我尝试使用它并登录时，它在login.php上设置了会话变量，但当我尝试移动页面时，它会破坏它。因此，在login.php中，我检查用户名和密码是否与数据库行的匹配，如果匹配，则设置一个变量，告诉网站用户登录了。然后我检查网站的变量，如果设置了，我让他们查看网站的变量。如果没有设置，我踢他们。

这是我的login.php

      <?php
  include 'functions/functions.php';
$db = mysqlconnect();?>
  <?php
error_reporting(0); 
session_start();
?><?php 
           if (isset($_POST["Submit"])) {

    $password = mysql_real_escape_string($_POST['password']);
    $password2 = strip_tags($password);
    $md5password = md5($password2);

    $statement = $db->prepare("SELECT * FROM users WHERE username = ? AND password = ? ");
    $statement->execute(array($_POST['username'],$md5password));
    $count = $statement->rowCount();
    /// If usernam and password match we carry on
    if ($count == "1")
      {
    $username23 = mysql_real_escape_string($_POST['username']);
    $thereusername = strip_tags($username23);

         $_SESSION['username'] = $thereusername ; 


         echo "You are now being logged in";

    //Test if it is a shared client
    if (!empty($_SERVER['HTTP_CLIENT_IP'])){
      $ip=$_SERVER['HTTP_CLIENT_IP'];
    //Is it a proxy address
    }elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){
      $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
    }else{
      $ip=$_SERVER['REMOTE_ADDR'];
    }

    $result5534453465 = mysql_query("UPDATE users SET lastip='".$ip."' WHERE username='".$_SESSION['username']."'") 
    or die(mysql_error());  
    mysql_query("INSERT INTO user_log (username, ip)
    VALUES ('".$_SESSION['username']."', '".$ip."')");



      echo '<META HTTP-EQUIV="Refresh" Content="0; URL=home.php">';    
        exit;


      }else{
        echo "Password or username is wrong";  
      }
    }
           ?>
    <form name="input" action="" method="post">
      <p>Username:</p>
      <p>
      <input type="text" name="username" id ="username">
      </p>
      <p>Password:  </p>
      <p>
        <input type="password" name="password" id = "password">
      </p>
      <p>
        <input type="submit" value="Submit" name = "Submit">
      </p>
    </form> 

我试着回显$_SESSION['username]，因为用户被重定向到网站，它回显正确，所以它被设置正确。。。。

因此，在网站的内侧，我检查它是否设置了$_SESSION['username']

ini_set('session.cookie_httponly',true);
    session_start();
    if(isset($_SESSION['last_ip']) == false){
    $_SESSION['last_ip'] = $_SERVER['REMOTE_ADDR'];
    }
    if ($_SESSION['last_ip'] !== $_SERVER['REMOTE_ADDR']){
    session_unset();
    session_destroy();
    }
    if(empty($_SESSION['username'])){

    echo '<META HTTP-EQUIV="Refresh" Content="0; URL=login.php">';    
    exit;

}

由于某种原因，页面上显示用户名为空。。。有趣的是，如果我注销，破坏整个会话，然后尝试登录，它就会工作。。。。

编辑：我刚刚编辑了的这段代码

//Test if it is a shared client
    if (!empty($_SERVER['HTTP_CLIENT_IP'])){
      $ip=$_SERVER['HTTP_CLIENT_IP'];
    //Is it a proxy address
    }elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){
      $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];
    }else{
      $ip=$_SERVER['REMOTE_ADDR'];
    }

至

//Test if it is a shared client
if (!empty($_SERVER['HTTP_CLIENT_IP'])){
  $_SESSION['last_ip']=$_SERVER['HTTP_CLIENT_IP'];
//Is it a proxy address
}elseif (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])){
  $_SESSION['last_ip']=$_SERVER['HTTP_X_FORWARDED_FOR'];
}else{
 $_SESSION['last_ip']=$_SERVER['REMOTE_ADDR'];
}

现在一切似乎都正常了。。。。我猜

 if(isset($_SESSION['last_ip']) == false){
$_SESSION['last_ip'] = $_SERVER['REMOTE_ADDR'];
}
if ($_SESSION['last_ip'] !== $_SERVER['REMOTE_ADDR']){
session_unset();
session_destroy();
}

会议结束了吗？

另一个编辑：我刚刚注意到，在我检查了上面的代码后，登录现在适用于firefox，但不适用于chrome，登录后移动到另一个页面后，会话变量不会在chrome中设置。我想可能是主机的问题？我使用的是php 5.2版本，我已经升级到5.3，但仍然有问题。。。

中php.in端的会话设置

ssion
Session Support     enabled
Registered save handlers    files user sqlite
Registered serializer handlers  php php_binary wddx
Directive   Local Value Master Value
session.auto_start  Off Off
session.bug_compat_42   Off Off
session.bug_compat_warn On  On
session.cache_expire    180 180
session.cache_limiter   nocache nocache
session.cookie_domain   no value    no value
session.cookie_httponly On  Off
session.cookie_lifetime 0   0
session.cookie_path /   /
session.cookie_secure   Off Off
session.entropy_file    no value    no value
session.entropy_length  0   0
session.gc_divisor  100 100
session.gc_maxlifetime  1440    1440
session.gc_probability  1   1
session.hash_bits_per_character 5   5
session.hash_function   0   0
session.name    PHPSESSID   PHPSESSID
session.referer_check   no value    no value
session.save_handler    files   files
session.save_path   no value    no value
session.serialize_handler   php php
session.use_cookies On  On
session.use_only_cookies    Off Off
session.use_trans_sid   0   0