Variable Diappearing Between Pages ...

[tanaka99]

I'm trying to keep a variable, but it keeps disappearing, going from this page:

<?PHP session_start();

$connection=mysql_connect("localhost","tanaka","tanakaDBone") or die('Could not connect to the database server');
$db = mysql_select_db("tanaka-ism_com", $connection) or die ("Unable to select database.");

$sql = "SELECT *
FROM Dealers
WHERE UserID='$user' and DlrPass='$pass'";

$result = mysql_query($sql)
or die ("Unable to get results.");

$DlrAccess = $_SESSION['DlrAccess'];

$temp = $DlrAccess;

$sql = "insert into Dealers (UserID, DlrName, DlrAddress, DlrCity, DlrState, DlrZip, DlrPhone, DlrType, DlrEmail, DlrWeb, DlrPass, DlrAccess, DlrNumber, DlrDist) Values ('$AddID', '$AddName', '$AddAddress', '$AddCity', '$AddState', '$AddZip', '$AddPhone', '$AddType', '$AddEmail', '$AddWeb', '$AddPass', '$AddAccess', '$AddNumber', '$AddDist')";
$sql_result = mysql_query($sql,$connection) or die ('Could not insert data');
echo("<table border=\"0\" width=\"760\" height=\"300\" background=\"images/common/logoback.jpg\"> <tr><td align=\"center\" valign=\"middle\"><font face=\"verdana,arial\" size=\"3\"><b>User <?=AddName?> has been added to the database. </b></font><font face=\"verdana,arial\" size=\"2\"><br><br>Click <a href=\"http://www.tanaka-usa.com/index.php?d=5&t=1&b=login\">HERE</a> to return to the Partner Area Home Page.</td></tr></table>");

?>

BACK to this page (which is also the landing page from the login)

<?php session_start();

include("dbinfo.inc.php");

mysql_connect(localhost,$username,$password);
@mysql_select_db($database) or die( "Unable to select database");

$sql = "SELECT *
FROM Dealers
WHERE UserID='$user' and DlrPass='$pass'";

$result = mysql_query($sql)
or die ("Unable to get results.");

$num = mysql_numrows($result)
or die ("You're not authorized to be here. If you feel you have recieved this
message in error, please contact <a href=\"mailto:[e-mail]\">Customer Service</a>");

$i=0;
while ($i < $num) {

session_register("UserID");
$UserID=mysql_result($result,$i,"UserID");
session_register("DlrName");
$DlrName=mysql_result($result,$i,"DlrName");
session_register("DlrAddress");
$DlrAddress=mysql_result($result,$i,"DlrAddress");
session_register("DlrCity");
$DlrCity=mysql_result($result,$i,"DlrCity");
session_register("DlrState");
$DlrState=mysql_result($result,$i,"DlrState");
session_register("DlrZip");
$DlrZip=mysql_result($result,$i,"DlrZip");
session_register("DlrPhone");
$DlrPhone=mysql_result($result,$i,"DlrPhone");
session_register("DlrType");
$DlrType=mysql_result($result,$i,"DlrType");
session_register("DlrEmail");
$DlrEmail=mysql_result($result,$i,"DlrEmail");
session_register("DlrWeb");
$DlrWeb=mysql_result($result,$i,"DlrWeb");
session_register("DlrPass");
$DlrPass=mysql_result($result,$i,"DlrPass");
session_register("DlrAccess");
$DlrAccess=mysql_result($result,$i,"DlrAccess");
session_register("DlrNumber");
$DlrNumber=mysql_result($result,$i,"DlrNumber");
session_register("DlrDist");
$DlrDist=mysql_result($result,$i,"DlrDist");

++$i;
}
$temp = $DlrAccess;

?>

[goa103]

hi tanaka,

WHERE UserID='$user' and DlrPass='$pass'";

You should always ENCODE/CRYPT your password using the md5 function before inserting them in your DB !

DlrDist) Values ('$AddID', '$AddName', '$AddAddress', '$AddCity', '$AddState',

You use many variables that comes from... nowhere. $user, $pass... are nor defined anywhere. If they come from a form, you have to use $GET or $POST to get these variables.

while ($i < $num) {

Once you have selected your Dealers, use mysql_fetch_array to parse the entires, don't use a counter. Check out the PHP manual.

I strongly advice you to read the introduction to forms and variables from the PHP manual. Read the MySQL functions reference section too. There's a good example and explanation.

Last but not least I don't think you should use sessions to store all these variables. When you need them, just query them from your database using the user session value. So you only have to store the user id.

JM