its $_SERVER['DOCUMENT_ROOT'], not $_SESSION[]!!!!!!