sessions

benson

Hello,
I have this script.
And it won't work.
i have tried al things wich i'm capable of.
login:

<form name="form1" method="post" action="checkuser.php">
                          <td height="30"><font color="#FFFF00" face="Fixedsys">Nickname
                            :</font></td>
                          <td height="30"> <input name="username" type="text" id="username" size="10"></td>
                        </tr>
                        <tr>
                          <td height="32"><font color="#FFFF00" face="Fixedsys">Paswoord
                            :</font></td>
                          <td height="32"> <input name="password" type="password" id="password" size="10"></td>
                        </tr>
			<tr>
			<td colspan="2" height="17">
                            <p align="center"><input type="submit" value=" Login "></td>
			</tr>
                      </table>
                    </div>
                  </td>
                </tr>
              </table>
</form>

checkuser.php:

<?php
session_start();

include 'db.php'; 
// Conver to simple variables 
$username = $_POST['username']; 
$password = $_POST['password']; 

if((!$username) || (!$password)){ 
    echo "Vul al de informatie in <br />"; 
    include 'index.php'; 
    exit(); 
} 

// Convert password to md5 hash 
$password = md5($password); 

// check if the user info validates the db 
$sql = mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password' AND activated='1'"); 
$login_check = mysql_num_rows($sql); 

if($login_check > 0){ 
    while($row = mysql_fetch_array($sql)){ 
    foreach( $row AS $key => $val ){ 
        $$key = stripslashes( $val ); 
    } 
        // Register some session variables! 
        session_register('first_name'); 
        $_SESSION['first_name'] = $first_name; 
        session_register('last_name'); 
        $_SESSION['last_name'] = $last_name; 
        session_register('email_address'); 
        $_SESSION['email_address'] = $email_address; 
        session_register('user_level'); 
        $_SESSION['user_level'] = $user_level; 

    mysql_query("UPDATE users SET last_login=now() WHERE userid='$userid'"); 

    header("Location: login_success.php"); 
} 
} else { 
    echo "Je kan niet inloggen of je paswoord of nicknaam was niet goed of je hebt je niet geactiveerd.<br /> 
    Probeer nog een keer!<br />"; 
    include 'index.php'; 
} 
?>

login_success.php

<?php
session_start(); 
?>
<html>

<head>
<meta http-equiv="Content-Type" content="text/html; charset=windows-1252">
<meta http-equiv="Content-Language" content="en-us">
<meta name="Title" content=" .::StreetFreaks::.     To Fast To Get Busted...">
<meta name="Author" content="Mathijs G.">
<meta name="Subject" content="streetracing,streetperformance">
<meta name="Description" content="Deze site gaat over streetracing in en om heerenveen.">
<meta name="Keywords" content="straat,street,race,racing,performance,tuning,heerenveen,streetperformance,races,foto's,street race foto's,sph,SPH,streetfreaks,streetfreaks.nl,StreetFreaks.nl,StreetFreaks,STREETFREAKS,opel,nissan,fiat,renault,ford,nissan skyline,skyline">
<meta name="Copyright" content="©StreetFreaks.nl">
<meta name="Designer" content="Mathijs G.">
<meta name="Publisher" content="Mathijs G. &amp; Eric-Jan G.">
<meta name="GENERATOR" content="Microsoft FrontPage 4.0">
<meta name="ProgId" content="FrontPage.Editor.Document">
<title>.::StreetFreaks::. To Fast To Get Busted.</title>
<style type="text/css">.link        { color: #FFFF00; font-family: Fixedsys }
</style>
</head>

<body bgcolor="#344C50">

<div align="center">
  <center>
  <table border="0" cellpadding="0" cellspacing="0">
    <tr>
<?php
if($_SESSION['user_level'] == 1)
{ 
?>
      <td><img border="0" src="../images/Chat.png" width="100" height="20"></td>
      <td><img border="0" src="../images/Mail.png" width="100" height="20"></td>
      <td><img border="0" src="../images/U_foto.png" width="110" height="20"></td>
      <td><img border="0" src="../images/Profiel.png" width="100" height="20"></td>
<?php   

}
if($_SESSION['user_level'] == 2)
{ 
?>
      <td><img border="0" src="../images/C_info.png" width="130" height="20"></td>
      <td><img border="0" src="../images/P_news.png" width="130" height="20"></td>
<?php
}
else
{
echo "oeps<br>";
echo "Ff wat anders dan<br>";
echo "je voornaam is ".$_SESSION['first_name']." en je achternaam is ".$_SESSION['last_name']."<br>";
echo "Klopt dit";
}
?>

DOes anybody knows the answer for this "i think little" problem ?

zmola

Hi. A quick browse of your code shows that you are using session_register and $SESSION, but when using $SESSION, you don't need to use session_register.

stolzyboy

Originally posted by zmola
Hi. A quick browse of your code shows that you are using session_register and $SESSION, but when using $SESSION, you don't need to use session_register.

right, PHP doesn't like when you intermingle the two, just do

session_start();

$_SESSION['first_name'] = $first_name;

benson

i deleted the session_register lines but it stil won't work.

Thanks fore your help...

zmola

Hi. How is it not working?

benson

He is not passing thru the session variables.
In either case he shows nothing at all.
So i really think it is in the sessions.
because checkuser wil redirect me to login_success.php
so it's not with the daabase

stolzyboy

who are you referencing as "HE" in your post as not passing the session variables, and can you rephrase what you said

benson

When i login the request goes to checkuser.php.
CHeckuser.php looks if the account exists.
if the account exists he wil set some session variables wich wil be needed on the page where you will come if everything was alright.
but when i come to the page login_success.php.
The page shows nothing because the session variables of the checkuser.php file arent passed thru to the login_success.php page.

I think that's the main problem..

Thanks for the help.

stolzyboy

where is first_name, last_name, email_address coming from, if you are just expecting those to be $first_name right from your query, that is incorrect

benson

To ensure myself that it's with the session i added the following line in the checkuser.php file:
$SESSION['test'] = "OK";
And to request that line in login_success.php:
echo "Sessions ".$SESSION['test']."";

I logged myself in but nothing was shown !!
no "Sessions OK"

I really don't get it.

And for stolzyboy..
The session variables are from the SQL query above it..
[edit]
And in the URL i can't see "i think normal for sessions" PHPSESSID=blablabla
[/edit]

stolzyboy

do this for me to make me happy, make these two pages

session_test_one.php with ONLY the following in it

<?
session_start();
$_SESSION['var_one'] = "This is var_one";
$_SESSION['var_two'] = "This is var_two";

echo "<a href=\"session_test_two.php\">click</a>";
?>

then session_test_two.php with ONLY this:

<?
session_start();
echo $_SESSION['var_one'] . "<br>";
echo $_SESSION['var_two'];
?>

now if this simple test doesn't work, then we'll have to look elsewhere for the problem

benson

It worked perfectly

stolzyboy

k, now what i want to know is there the

$first_name comes from in this line

$_SESSION['first_name'] = $first_name;

if $first_name is suppposed to be a DB value, i am pretty sure you are doing it incorrectly

benson

Yes it comes from the db..

stolzyboy

well i'd really like to know HOW, can you do this and something prints

echo $first_name; //right before you set it to the session

like i said i don't think you are getting the value from the db correctly

benson

This piece must do taht:

$sql = mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password' AND activated='1'");  

$login_check = mysql_num_rows($sql);  

if($login_check > 0){  

    while($row = mysql_fetch_array($sql)){  

    foreach( $row AS $key => $val ){  

        $$key = stripslashes( $val );  

    }  

        // Register some session variables! 
        session_register('first_name');  

        $_SESSION['first_name'] = $first_name;  

        session_register('last_name');  

        $_SESSION['last_name'] = $last_name;  

        session_register('email_address');  

        $_SESSION['email_address'] = $email_address;  

        session_register('user_level');  

        $_SESSION['user_level'] = $user_level;  

    mysql_query("UPDATE users SET last_login=now() WHERE userid='$userid'");  

    header("Location: login_success.php");  
}

stolzyboy

change that to this

$sql = mysql_query("SELECT * FROM users WHERE username='$username' AND password='$password' AND activated='1'");   

$login_check = mysql_num_rows($sql);   

if($login_check > 0){   

    $row = mysql_fetch_array($sql);
        // Register some session variables! 
        $_SESSION['first_name'] = $row['first_name'];
        $_SESSION['last_name'] = $row['last_name'];
        $_SESSION['email_address'] = $row['email_address'];
        $_SESSION['user_level'] = $row['user_level'];

    mysql_query("UPDATE users SET last_login=now() WHERE userid='$userid'");   

    header("Location: login_success.php");   
}

benson

I found the problem.
The whole problems lies with the Header("location: login_succes.php"); line.
I replaced this line with:
<a href="login_succes.php">click</a>
And with that version i will get the phpsessid=blalblalba url...

But i really do not want something like that Is there another option ??
[edit]
tryed meta refresh to. didn't worked
[/edit]

stolzyboy

you can leave the header function in there as long as you put this

ob_start();

right after your

session_start();

line, that will suppress header errors

benson

That isn't the problem..
This script is based on the session principe that it wil paste after every link the phpsessionid code.
But with a header location it wil not paste the rest of it after it....
I tried meta refresh but it will not paste something afterthat tooo