[PHP] Using session_regenerate_id With Logins
 

On my login.php script, I'm trying to use the function session_regenerate_id to prevent session fixation attacks. Now, I'm a bit confused by all of this. On my login.php script, if the login validates, the following code runs:

I tried using the session_regenerate_id function, but when I add it to the above code, the session variable never sets itself. Strange...


I'm really lost.