another cookie problem

[tuf-web_co_uk]

hey peeps

i got a setcookie() script on a page in a /users/ directory and i have a style script in a /includes/ directory

when a user logs in on the main page /index.php the user can see he/she is logged in because of a welcome message

however my style script which is loaded in to the same page ( include() )
does not say that the user is logged in

the welcome message script is also loaded from the /includes/ directory

welcome script (/includes/banner.php)

<? 
  if(isset($_COOKIE['user'])) { 

echo "Welcome, <b>".$_COOKIE['user']."</b>!"; 
   } else { 

echo "Welcome <b>Guest</b>!"; 
   } 

  ?> 

style script (/includes/style.php)

 

if(isset($_COOKIE['user'])) { 

$sql = "SELECT * from custom where username=$_COOKIE['user']"; 
$result = mysql_query($sql) or die(mysql_error()); 

while( $row = mysql_fetch_array($result) ) { 

?> 
code to print 
<? } } else { ?> 
code to print 
<? } ?> 

thanks in advance Jon

[matt_4013]

Hi John, I think your problem is your query. Try changing it to this:

$sql = "SELECT * from custom where username='".mysql_escape_string(trim($_COOKIE['user']))."'";

a) you need quotes around the value
b) I don't think PHP will recognize a quoted array key inside double quotes 🙂

(We use trim and mysql_escape_string to make sure that nobody can be a mean bastard and perform an sql injection)

[tuf-web_co_uk]

thanks for that tip 🙂

but thats not the problem 😕

the problem is that if i load the /includes/style.php page using include() from the /index.php page the user is being told
he or she is not logged in

however if i just loaded the /includes/style.php page up singly then the user is being told that they are logged in because it loads their information

please can you tell me why this is happening?

thanks again Jon

[tuf-web_co_uk]

please someone help, i'm sure this isnt much of a problem for you advanced people

thanks in advance Jon 🙂