Is this too many session variables?

[shmick25]

Hey, I am creating a form that spans for pages and then the data gets written to a database. The user can navigate forward and back across the forms once they have filled it out to make changes. This is how many session variables I have in my sessions.inc file. Do you think there is too many?

<?
session_register("pagecount");
session_register("title");
session_register("dob3");
session_register("fname");
session_register("lname");
session_register("pname");
session_register("citizen");
session_register("gender");
session_register("paddress1");
session_register("paddress2");
session_register("postcode1");
session_register("postcode2");
session_register("city2");
session_register("city1");
session_register("country1");
session_register("country2");
session_register("state1");
session_register("state2");
session_register("busphone");
session_register("ahphone");
session_register("faxnum");
session_register("email");
session_register("commencem");
session_register("commencey");
session_register("ufrom1");
session_register("ufrom2");
session_register("ufrom3");
session_register("ufrom4");
session_register("uto1");
session_register("uto2");
session_register("uto3");
session_register("uto4");
session_register("uname1");
session_register("uname2");
session_register("uname3");
session_register("uname4");
session_register("uschool1");
session_register("uschool2");
session_register("uschool3");
session_register("uschool4");
session_register("ustate1");
session_register("ustate2");
session_register("ustate3");
session_register("ustate4");
session_register("ucomplete1");
session_register("ucomplete2");
session_register("ucomplete3");
session_register("ucomplete4");
session_register("efrom1");
session_register("efrom2");
session_register("efrom3");
session_register("efrom4");
session_register("eto1");
session_register("eto2");
session_register("eto3");
session_register("eto4");
session_register("employer1");
session_register("employer2");
session_register("employer3");
session_register("employer4");
session_register("position1");
session_register("position2");
session_register("position3");
session_register("position4");
session_register("fullpart1");
session_register("fullpart2");
session_register("fullpart3");
session_register("fullpart4");
session_register("day");
session_register("month2");
session_register("year");
session_register("password1");
session_register("filename");
session_register("username");
session_register("pages_completed");
?>

[rharter]

no, but you might consider an associative array to save yourself some typing ....

[Weedpacket]

There's already an associative array. It's called $_SESSION. Use that and you don't need session_register() at all.

[shmick25]

Yes, I have read about those, but only now have had a look. They work like a treat. What is the best way to keep track of what page has been complete do you think? With the forms?

What I have at the moment is two sets of forms on each page:

if (session is not set ) show blank form,

else (show form with session values).

I have this for 4 pages.. I am a bit confused with some of the logic

[Weedpacket]

It's often easier to just use the same form for both. Test each session value with isset($_SESSION['field']) as you come to its corresponding form field. If it's not set, leave the form field blank. If it's set, write its value in the field.

Doing that means that then, when you display the form, you don't have to concern yourself about whether it's for the first time or whether some or all of its fields have already been filled out.

When the form is submitted, put all the submitted data into the session array. Check it for completeness, validity, and safety (never trust what comes from the client to be innocent). If it's invalid for one reason or another, return the user to the form page (and display a suitable error message, which you could have stored in a session variable!). If all the validation tests are passed. Do whatever it is you're planning to do and give the user a confirmation page or whatever.

[shmick25]

You are correct.. that sounds like good logic to me! 😛 Thanxs heaps.. I will let you know how it goes

[dwalker]

I too have a need to accept data via a form; submit it to my database; and have a need to access it from time to time on other pages. Is it abosolutely necessary to register EVERY field within the form?

[MrAlaska]

Originally posted by dwalker
I too have a need to accept data via a form; submit it to my database; and have a need to access it from time to time on other pages. Is it abosolutely necessary to register EVERY field within the form?

It is not necessary to register ANY field. Using $_SESSION variables is an approach one might be comfortable with, but certainly not required by any means, or even necessarily desireable.

[dwalker]

What is the most straight forward method of storing the form information (to be used later in other forms on other pages) as well as session information?? Is it possible to store the form information in my database AND within the session? It seems to me that if I log the information into my database, I'll have to pay more attention to authentication, whereas, the somewhat automated session 'stuff' gives me just as much flexibility with a little less work.

Again, what is the most straight forward method of storing the form information (to be used later within other forms on other pages) as well as session information???

Would you mind taking crack at my authentication scheme within my site:

http://www.healthyproductsplus.com/cust/login.php

There are only two 'protected' areas: 1) my customers' account information as gotten to by the link on the page; the other ensures that I have the correct customer information BEFORE they click any of the ADD TO CART buttons -- if they've not logged in; I kick them over the the log page, when they've been authenticated, I take them back to the ADD TO CART button.

Please let me know the results. Thank you for your assistance.

NOTE: the site is a work in progress (not everything is functional yet). My focus has been directed toward the functionality of the site -- I'll pretty it up later.

[MrAlaska]

Of course it is possible, virtually ANYTHING is possible. Storing in $_SESSION is handy for accessing the variables later in the session, the database is needed if you wish to store the variables.

$SESSION offers you a very convenient and flexible means of storing variables, that's why so many people love them. If there was ONE right answer, though, there would not be alternative methods available. Form validation should occur, however, whether you are using $SESSION or not.

As I mentioned in the PM, there is not much I can tell you about your site from the client side.