I've got a login script, and on it I open the DB, authenticate user and session_register a bunch of variables. Throughout the session, all user info is retained.
I've got an administration section, that I use to add, edit, and delete users, and once I've say, added a user, I reopen the database, run an INSERT, and want to redirect, but my session-registered variables aren't retained.
My question is, once I've logged in a user, registered session variables, and want to run an insert ... how do I retain the original variables so the logged in user can resume navigating the site without having to log back in. Sounds simple enough, but I keep losing them.
Please help.
Here's the login script ...
<?php
include("dbinfo.inc.php");
mysql_connect(localhost,$username,$password);
@mysql_select_db($database) or die( "Unable to select database");
$sql = "SELECT *
FROM Dealers
WHERE UserID='$user' and DlrPass='$pass'";
$result = mysql_query($sql)
or die ("Unable to get results.");
$num = mysql_numrows($result)
or die ("You're not authorized to be here. If you feel you have recieved this
message in error, please contact <a href=\"mailto:custsvc@tanaka-ism.com\">Customer Service</a>");
$i=0;
while ($i < $num) {
session_register("UserID");
$UserID=mysql_result($result,$i,"UserID");
session_register("DlrName");
$DlrName=mysql_result($result,$i,"DlrName");
session_register("DlrAddress");
$DlrAddress=mysql_result($result,$i,"DlrAddress");
session_register("DlrCity");
$DlrCity=mysql_result($result,$i,"DlrCity");
session_register("DlrState");
$DlrState=mysql_result($result,$i,"DlrState");
session_register("DlrZip");
$DlrZip=mysql_result($result,$i,"DlrZip");
session_register("DlrPhone");
$DlrPhone=mysql_result($result,$i,"DlrPhone");
session_register("DlrType");
$DlrType=mysql_result($result,$i,"DlrType");
session_register("DlrEmail");
$DlrEmail=mysql_result($result,$i,"DlrEmail");
session_register("DlrWeb");
$DlrWeb=mysql_result($result,$i,"DlrWeb");
session_register("DlrPass");
$DlrPass=mysql_result($result,$i,"DlrPass");
session_register("DlrAccess");
$DlrAccess=mysql_result($result,$i,"DlrAccess");
session_register("DlrNumber");
$DlrNumber=mysql_result($result,$i,"DlrNumber");
session_register("DlrDist");
$DlrDist=mysql_result($result,$i,"DlrDist");
++$i;
}
$temp = $DlrAccess;
?>
<table width="760" border="0" cellspacing="0" cellpadding="1" background="images/common/logoback.jpg">
<tr><td colspan="2" valign="top">
<font face="Verdana,Arial" size="-2"><b><a href="index.php">Home</a> > <?=$DlrName?>
</td></tr>
</table>
<table border=0 width="760" background="images/common/logoback.jpg" cellpadding="10">
<tr><td align="left" width="200" valign="top">
<br><font face="Verdana,Arial" size=2 color=#003399><b>Main Page</b><br>
<?php
if (($temp > 400) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=parts_pricesNEW">Parts Prices</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=registrationNEW">Register Products</a><br>
<?php
if (($temp > 400) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=claimNEW">Warranty Claims</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) { ?>
<font size=2><a href="index.php?d=5&t=1&b=literatureNEW">Service Literature</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) { ?>
<font size=2><a href="index.php?d=5&t=1&b=dlrchangeNEW">Dealer Profile</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=marketingNEW">Sales & Marketing</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) {
?>
<a href="http://www.tanaka-usa.com/DevBB/">Discussion Forum</a><br>
<?php
}
if (($temp > 600) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=shopfirstNEW">Order Parts</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=suggestNEW">Suggestion Box</a><br>
<?php
}
if (($temp > 400) and ($temp < 905)) {
?>
<font size=2><a href="index.php?d=5&t=1&b=testimonyNEW">Testimonials</a><br>
<?php
}
} ?>
<font size=2><a href="mailto:custsvc@tanaka-ism.com">Website Feedback</a><br>
<font size=2><a href="index.php?d=5&t=1&b=logoffNEW">Logoff</a><br>
</font>
</td><td valign="top" height="400" background="images/common/logoback.jpg" align=center>
<div name="CenterBox" id="CenterBox">
<br><div align="center">
<font face="verdana,arial," size="3"><b>Welcome <?=$DlrName?></b> ... </font><hr width=80%>
</font><br><center><font face="verdana,arial,Courier,monospace" size="2">to Tanaka's <b>Partner Only</b> Area, this space will showcase important announcements and other must see information. Use the menu options on your left to navigate within this portion of the site.<br><br><br><img src="/images/common/newlogo.jpg"><font size=1><br><b><font color=#ee7218>New Header Sign</font></b> - order yours today!<br>(p/n: 592360) - measures 12" (H) x 48" (W)</font><br><br><br><br>
</center></div>
</div>
</td></tr>
</table>
<?php
if (($temp < 890) and ($temp > 886)) {
echo "<font size=\"2\" face=\"verdana,arial\"><b>TANAKA ADMIN</font><br><br>";
echo "<font size=\"2\" face=\"verdana\"><a href=\"http://www.tanaka-usa.com/calendar/calendar.php\">Company Calendar</a></font><br><br>";
echo "<font size=\"2\" face=\"verdana\"><a href=\"http://www.tanaka-usa.com/index.php?b=adddealer&t=1\">Add Database User</a></font><br>";
echo "<font size=\"2\" face=\"verdana\"><a href=\"http://www.tanaka-usa.com/index.php?b=edit1\">Edit Existing User</a></font><br>";
echo "<font size=\"2\" face=\"verdana\"><a href=\"http://www.tanaka-usa.com/index.php?b=delete1\">Delete Database User</a></font><br><br>";
?>
<?php
}
?>
</body>
</html>
Here's the insert page ...
<HTML>
<HEAD><TITLE>INSERT Data via PHP</TITLE></HEAD><BODY>
<?PHP
$connection=mysql_connect("localhost","$user","$password") or die('Could not connect to the database server');
$db = mysql_select_db("xxxdatabasexxx", $connection) or die ("Unable to select database.");
$sql = "SELECT *
FROM Dealers
WHERE UserID='$user' and DlrPass='$pass'";
$result = mysql_query($sql)
or die ("Unable to get results.");
$temp = $DlrAccess;
$sql = "insert into Dealers (UserID, DlrName, DlrAddress, DlrCity, DlrState, DlrZip, DlrPhone, DlrType, DlrEmail, DlrWeb, DlrPass, DlrAccess, DlrNumber, DlrDist) Values ('$AddID', '$AddName', '$AddAddress', '$AddCity', '$AddState', '$AddZip', '$AddPhone', '$AddType', '$AddEmail', '$AddWeb', '$AddPass', '$AddAccess', '$AddNumber', '$AddDist')";
$sql_result = mysql_query($sql,$connection) or die ('Could not insert data');
echo("<table border=\"0\" width=\"760\" height=\"300\" background=\"images/common/logoback.jpg\"> <tr><td align=\"center\" valign=\"middle\"><font face=\"verdana,arial\" size=\"3\"><b>User <?=AddName?> has been added to the database. </b></font><font face=\"verdana,arial\" size=\"2\"><br><br>Click <a href=\"http://www.tanaka-usa.com/index.php?d=5&t=1&b=login\">HERE</a> to return to the Partner Area Home Page.</td></tr></table>");
?>
</BODY>
</HTML>