Rule Manager query

I have a rule created by security assist that I want to restrict logged in users with a session variable not equal to 2

So my rule settings are:

Restrict
Value <?php echo $_SESSION['user_type']; ?>
Criteria '<>'
Compare to 2

I've also tried changing the rule so that I do allow logged in users with a session variable equal to 2

Neither are doing the intended job!

What am i missing?

is the login page setting the user type session variable.

to see all of the session variable names that are being set and their values add the following code in the body of your page:

<?php @session_start(); ?>

<pre>

<?php var_dump($_SESSION); ?>

</pre>

this will write the entire session contents to the page for troubleshooting.

if you still need help, I would need a copy of the login page, the WA_SecurityAssist/HelperGroupRules_PHP.php file and a copy of the page you are applying the access rule to.

Got it!

Restrict

Value <?php echo $_SESSION['user_type']; ?>

Criteria '=>'

Compare to 2

Odd that compare didnt like '<>'

Paul