When to start a session?

Question

I have a system that requires the user to login (or register) for an account before they are able to access their Member \'dashboard\'.

My question is... at what poi

Answer 1

Start a session on the page(s) that need to access session data. As part of a successful login, you should also call session_regenerate_id to prevent session fixation.