Display Logged-In User’s Name on Every PHP Page

This guide shows you how to display a logged-in user’s name on every PHP page of your website. You’ll learn a simple, secure method using sessions, so the user’s name appears automatically in headers, navigation bars, or anywhere you choose, without repeating code on each page.

What You’ll Need

• A working PHP environment (local like XAMPP/WAMP or a web server).
• Basic knowledge of PHP syntax and HTML.
• An existing login system that stores user information (e.g., in a MySQL database). If you don’t have one, you can adapt the steps to use a hardcoded user for testing.
• Access to your PHP files (e.g., via FTP or a file manager).

Step-by-Step

1. Start a session on every page. At the very top of each PHP file (before any HTML or output), add session_start();. This must be the first thing on the page—no spaces, no echo statements before it. If you have a central configuration file (like config.php) that’s included on every page, you can put session_start(); there instead, as long as that file is included before any output.
2. Set the user’s name in the session during login. In your login script (where you verify the username and password), after successful authentication, store the user’s name in a session variable. For example: $_SESSION['username'] = $user_name_from_db; or $_SESSION['full_name'] = $user['full_name'];. Make sure you fetch the name from your database (e.g., using mysqli or PDO) and assign it to the session.
3. Create a reusable function (optional but recommended). To avoid repeating code, create a function like get_logged_in_username() in a shared file (e.g., functions.php). The function checks if the session variable is set and returns the name, otherwise returns null or an empty string. Example:

   function get_logged_in_username() {
       return isset($_SESSION['username']) ? $_SESSION['username'] : '';
   }
       

   Then include this file on every page.

4. Display the name in your HTML. In your page template (header, navbar, or any place), use PHP to echo the session variable. For instance: <p>Welcome, <?php echo htmlspecialchars($_SESSION['username'] ?? ''); ?>!</p>. If you’re using the function, it would be <?php echo htmlspecialchars(get_logged_in_username()); ?>. The htmlspecialchars() function prevents XSS attacks by escaping HTML characters.
5. Handle the case when no user is logged in. Decide what to show when the session variable is not set. You could show a generic greeting like “Welcome, Guest” or a login link. Use a conditional: <?php if (isset($_SESSION['username'])): ?> Welcome, <?php echo htmlspecialchars($_SESSION['username']); ?> <?php else: ?> <a href="login.php">Log in</a> <?php endif; ?>.
6. Test with different scenarios. Log in, navigate to several pages, and confirm the name appears. Log out (which should unset the session variable) and verify the fallback appears. Also test by closing the browser and reopening—the session should be lost, and the name should not appear.
7. Consider using a template or include file for the header. If you have a common header file (e.g., header.php) that’s included on all pages, place the display code there. This ensures consistency and avoids duplication.

Common Mistakes

• Calling session_start() after output. If you echo anything (even a blank line or whitespace) before session_start(), PHP will throw a “headers already sent” warning. Ensure it’s the very first line of your file.
• Not using htmlspecialchars() when echoing the name. If the username contains HTML or JavaScript, it could break your page or lead to XSS vulnerabilities. Always escape output.
• Forgetting to set the session variable on login. If you store the user ID but not the name, you’ll need to fetch the name from the database each time. Better to store the name directly in the session.
• Using a different session variable name across pages. Be consistent. If you use $_SESSION['username'] on one page and $_SESSION['user_name'] on another, the name won’t display.
• Not starting a session on the login page itself. The login page must also call session_start() before setting the variable.

Tips

• Store the full name (first and last) separately if you need to display just the first name or a formal version. For example, store $_SESSION['first_name'] and $_SESSION['last_name'].
• Use a constant or a config file to define the session key (e.g., define('SESSION_USERNAME', 'username');) to avoid typos.
• If you have a logout script, make sure to unset the session variable and destroy the session: session_unset(); session_destroy();.
• For better security, regenerate the session ID after login: session_regenerate_id(true);.
• If you’re using a framework (Laravel, CodeIgniter), they have built-in session and auth helpers—use those instead of raw $_SESSION.

Troubleshooting

Name doesn’t appear after login. Check that the login script actually sets the session variable. Add a temporary var_dump($_SESSION); on the login page after setting it to confirm. Also, ensure you’re not redirecting to a page that doesn’t call session_start().

“Headers already sent” warning. This usually means there’s output (even whitespace) before session_start(). Open the file in a text editor and remove any characters before the <?php tag. Also check included files for trailing whitespace after the closing ?> tag—it’s best to omit the closing tag in pure PHP files.

Name shows as “Array” or a number. You might be storing the entire user row instead of a specific field. Check your assignment: use $_SESSION['username'] = $user['name']; not $_SESSION['username'] = $user;.

Name appears on some pages but not others. Ensure every page that needs the name has session_start() at the top. If you’re using an include for the header, make sure the header file is included on all pages.

Name disappears after a short time. This is due to session expiration. Adjust the session timeout in your PHP configuration (session.gc_maxlifetime) or extend it with session_set_cookie_params().

User sees “Guest” even when logged in. The session might not be persisting across pages because the session cookie isn’t being sent. Check that your domain and path settings are correct (usually default works). Also, if you’re on localhost with a port, the cookie path might need to be set to ‘/’ via session_set_cookie_params(0, '/');.

Frequently Asked Questions

Q: Can I display the user’s name without using sessions?
A: Yes, you could use cookies, but sessions are more secure because the data is stored on the server. Cookies can be manipulated by the client, so it’s not recommended for sensitive information like usernames.

Q: How do I show the name only on certain pages?
A: Simply include the display code only on the pages where you want it. If you have a common header, you can use a conditional variable to control whether the name is shown.

Q: What if the user changes their name in the database?
A: The session variable will still hold the old name until the session ends or you update it. You can update the session variable after any profile edit, or fetch the name from the database on each page load (but that’s less efficient).

Q: Is it safe to store the username in a session?
A: Yes, sessions are stored on the server and only a session ID is sent to the client. However, be careful not to store sensitive data like passwords. The username is generally safe.

Q: How do I display the user’s name in a dropdown menu?
A: Use the same PHP echo inside the HTML of the dropdown. For example: <span><?php echo htmlspecialchars($_SESSION['username']); ?></span> <ul>...</ul>

Q: Can I use this method with a CMS like WordPress?
A: WordPress has its own session and user system. You’d use wp_get_current_user() instead. This guide is for custom PHP applications.

Related

• Google TV Default Launcher vs Lightweight Launcher: What Changes?
• Hyperscale Data Centers: Benefits & How They Work
• Cloudflare vs AWS Shield DDoS Protection Compared