How to know if non-cookie user is logged in?

[4bidden]

I have modified my board so that there is a link in every users control panel to edit a custom setup page of theirs. The edit page for this is not part of the board (obviously) and the only way I am able to tell if a user is logged in is by checking $_COOKIE. If the user is not using cookies, the $_SESSION is still empty (yes, even after session_start). What method is being used to keep them logged in between pages when not using cookies?

How can I check if a user is logged in if I don't find $_COOKIE info?

[4bidden]

Bump..... seems like this is an easy question? How does vB keep users logged in between pages if cookies are disabled?

[4bidden]

Anyone?

sessions are managed in the database. when a user login, or just browse the forum, it is tracked action by action in the sessions system... even without cookies... when someone have the cookies inactive, the session id is kept in the url... so the id is compared with the data in the database, keeping track of the active user.

there is no $_SESSION because vBulletin is not using the default PHP session management, it has its own session manager... you have to call $vbulletin->session to make the same, but also have to load the vBulletin API to make it work...

[kkiely]

I have this same problem. I am an amatuer when it comes to coding but I would that if VBulletin is able to keep sessions between pages without a cookie then VB must have a quick way of doing it - which means there must be a quick function or access to a file or something that can be put into a non-vb page. Am I right about this?

sessions are kept inside vBulletin, so you have to load your page within vBulletin to be able to retrieve that information...

https://vborg.vbsupport.ru/showthread.php?t=132996 can be helpful for you then.

[kkiely]

that page is just a variation of the non-vb login that uses the

if ($vbulletin->userinfo['userid']!=0) {

line to check for a cookie. If sessions are carried from page to page within VB then I'm wondering if anyone has found a way to clone that ability outside vb through an include or function or someething.

[WetWired]

Well, you could manually match the session in the link with the sessions table joined with the user table, but if you don't use the vB backend to do it, the session is likely to expire while the user is doing non-vB stuff.