Recent content by Jayvon Reid

I'm new to Php and have built a login system using Php and Mysql. Everything works great, except users have access too ALL pages with a session_start. This could allow a user to directly type a URL and modify ANOTHER user's profile. Any suggestions?