Sessions and classes

Keep a user signed in, and organise code with classes.

PHP

<?php
session_start();
if ($loginIsCorrect) {
    session_regenerate_id(true);
    $_SESSION["user_id"] = $userId;
}

class Account {
    private int $balance = 0;

    public function __construct(public string $owner) {}

    public function deposit(int $amount): void {
        $this->balance += $amount;
    }

    public function balance(): int {
        return $this->balance;
    }
}

Call session_start() before any output. Getting a new session id at login stops an attacker reusing an old one.

← PHP and MySQL PHP quick reference →