Question

included php file:

    <?php
     session_start();

     $mysqli = new mysqli('[removed]', '[removed]', '[removed]', '[removed]') or mysqli_connect_error();

     function m($str, $mysqli) { return "'".$mysqli->real_escape_string($str)."'"; }
     function h($str, $mysqli) { echo $mysqli->htmlspecialchars($str); }

     $user = $mysqli->real_escape_string($_SESSION['username']);

     $user_query = "SELECT points FROM users WHERE username =" .m($user, $mysqli) ."";
     $result = $mysqli->query($user_query);
     $row = $result->fetch_assoc();
     $points = $row['points'];

     function checklogin(){
        if(isset($_SESSION['username'])){
        echo $user . " Points: " . $points; 
        }
      }
    ?>

the html relevant part would be

<? include ('config.php')
   session_start(); 
   checklogin(); ?>

Note: The variables work perfectly when called outside of the function.

Answer 1

If you want to do this according to best practices, the following is better than using global variables.

    function checklogin($user,$points)
    {
        if(isset($_SESSION['username'])){
            echo $user . ' Points: ' . $points;
        }
    }