I was creating a user session when he/she logged in.

I am giving a simple example below:

$_SESSION['username'] = $_POST['username'];

why would I able to echo the username when I go to another by just using?

echo $username; // or echo $_SESSION['username'];

you shouldnt be able to unles in the next script you type


$username = $_SESSION['username'];


then you could recall the username!

Thanks, but that was not the problem.
The problem was that the server I was testing on had register global on.

I just flag it off using .htaccess php_flag register_globals off

and it solved the problem.

OO okay weell im glad that you figured it out!