Inserting correct value?

Anon

Hi all,
This is the top part of my script:<?
session_start();

if ($userid && $password)
{
// if the user has just tried to log in

$db_conn = mysql_connect('localhost', '', '');
mysql_select_db("psp", $db_conn);
$query = "SELECT * FROM members WHERE login_name='$userid' AND password='$password' AND admin='no'";
$result = mysql_query($query, $db_conn);
if (mysql_num_rows($result) >0 )
{
// if they are in the database register the user id
$valid_user = $userid;
session_register("valid_user");

}
}

if (session_is_registered("valid_user"))
{
// logged in successfully to membership area
header ("Location: index.php?id=3 ");

}

You will notice that if i put the value 3 in the above script it works fine. What i want to do is get the value associated with that persons username and password from the member_id field from the database. What would i need to add to the above script?

Cheers,
Colin Howell

mkarabulut

only you should write
header("Location:index.php3?id="&$HTTP_SESSION_VARS["valid_user"]);
Of course you should had registered valid_user with the value of member_id first

Cheers.

Anon

Thanks for the reply Mustafa

How would i do that? I am very new to PHP.

mkarabulut

check you code again. I edited it

session_start();

if ($userid && $password)
{
// if the user has just tried to log in

$db_conn = mysql_connect('localhost', '', '');
mysql_select_db("psp", $db_conn);
$query = "SELECT * FROM members WHERE login_name='$userid' AND password='$password' AND admin='no'";
$result = mysql_query($query, $db_conn);
if (mysql_num_rows($result) >0 )
{
// if they are in the database register the user id
//you can change 'user_id' text if the field on the database is another thing
$valid_user = mysql_result ($result,0,"user_id");
session_register("valid_user");

}
}

if (session_is_registered("valid_user"))
{
// logged in successfully to membership area
header ("Location: index.php?"&$HTTP_SESSION_VARS["valid_user"]);

}

Best regards.
Mustafa K.

mkarabulut

I am sorry I made a mistake.
The line should be like that
header ("Location: index.php?". $HTTP_SESSION_VARS["valid_user"]);
You see it should be '.' to concatenate the strings, not a '&'.