<?


echo 'in mainfile <br>';


$user = "MjpzY2h3aW06YTg5MWI0ZmQxYWJjODJlOTBjZGE4ODAwYjYxYTRmODA6MTA6OjA6MDowOjA6OjQwOTY%3D";


if (!is_array($user)) {


        $user = base64_decode($user);


        $user = addslashes($user);


        echo 'user after addslashes ' . $user . '<br>';


        $user = explode(":", $user);


    }


    $uid = $user[0];


    $pwd = $user[2];


    echo 'uid and pwd ' . $uid . ' ' . $pwd . '<br>';


?>

function is_user($user) {


      echo 'in mainfile is_user function <br>';


    if (!$user) { return 0; }


    if (isset($userSave)) return $userSave;


    if (!is_array($user)) {


        $user = base64_decode($user);


        $user = addslashes($user);


         echo 'user after addslashes ' . $user . '<br>';


        $user = explode(":", $user);


    }


    $uid = $user[0];


    $pwd = $user[2];


    echo 'uid and pwd ' . $uid . ' ' . $pwd . '<br>';


    $uid = intval($uid);


    if (!empty($uid) AND !empty($pwd)) {


        global $db, $user_prefix;


        $sql = "SELECT user_password FROM ".$user_prefix."_users WHERE user_id='$uid'";


        $result = $db->sql_query($sql);


        $row = $db->sql_fetchrow($result);


        echo 'this is the password returned from the user table ' . $row[0] . '<br>';


        $db->sql_freeresult($result);


        if ($row[0] == $pwd && !empty($row[0])) {


            static $userSave;


           return $userSave = 1;


        }


    }


    static $userSave;


    return $userSave = 0;


}

if(is_user($user)) {


  include("modules/$module_name/navbar.php");


}

if(is_user($user)) {


  include("modules/$module_name/navbar.php");


echo 'including navbar.php from YA index.php <br>';


}





From what you've said, I really don't think that inclusion is ever taking place but it's worth verifying.  





You could also add an echo of a similar nature to navbar.php to indicate that it's being executed.  Just stick it near the top outside of any functions.  





Later:  well I just decided to register for your site and did (the test one).  If you look at the diagnostic line that echoes $row[0] which is supposed to be the password you'll see it's blank.  I have to leave for the evening and it's always possible I made a syntatical mistake but it doesn't look to me like the password is being stored in the users table.  Anyone see a mistake in that diagnostic code????





If password isn't stored then the is_user function will always return a logical false and the problems you are seeing will continue.  Sorry I don't have more time now but I'll look at again tomorrow if no one else has jumped in or you haven't figured it.  You could look at the field in the table with phpmyadmin and you could even force feed a value in there using the md5 function to translate encrypt the "normal" string into the md5 version.