Using DB info from logged in user

Hitoshi

How is this done? I have successfully managed to make a secure login.. i now need to know how I display infomation from the db (of that specific user) on the page. So far I have this :

.:Your Stats:. 
Officer Name : <?php
echo "{$_SERVER['PHP_AUTH_USER']}";
?> 
HP : <?php
?> 
XP : <?php
?> 
LV : <?php
?> 
RK : <?php
?> 
DF : <?php
?> 
AT : <?php
?> 
LK : <?php
?> 
Gold : <?php
?>

The Officer name works fine, but I want to extract the rest of the stats from my DB (for the user that is logged in). How??

WinterDragon

uh... ok ok, so you are using MySql for the db right? Anyways.. I am assuming you know how to connect to the database, and you are just wanting to know the query ya need to throw...

$sql = "SELECT * FROM tablename WHERE name='$username'";

$query = mysql_db_query("db", $sql);

then...

$whatever = mysql_fetch_array($query);

echo $whatever['df'];
echo $whatever['rk'];

etc... um, That should do it, although there is a bit of missing code, just assuming you know the rest. smiles

Hitoshi

ok here is my code now :

<?php

require_once ('mysql_connect.php');

$sql = "SELECT * FROM users WHERE username='$username'"; 

$query = mysql_db_query("db", $sql);

$stats = mysql_fetch_array($query); 

echo $stats['HP']; 
echo $stats['LV']; 
echo $stats['RK'];
echo $stats['AT'];
echo $stats['DF'];
echo $stats['LK'];
?>

Nothing appears?? I am definatly logged in (otherwise the page would not be viewable.) have i still missed some code out?

WinterDragon

alright, what is the $username variable set to? What I would do, is just set it to something you KNOW is in the database as a user, and then try querying the db... it might not be existant in the database..

Hitoshi

That's the thing.. I dont know how to set the $username variable to the user which is signed in.

here is my login script, can u figure it out??

//MYSQL CONNECT Etc..//

$query = "SELECT first_name FROM users WHERE username='{$SERVER['PHP_AUTH_USER']}' and password=PASSWORD('{$SERVER['PHP_AUTH_PW']}')";

$result = mysql_query ($query);
$row = @mysql_fetch_array ($result);

if ($row) { $authorized = TRUE;
}
}

if (!$authorized) {

header('WWW-Authenticate: Basic realm="Log in to experiance PSO Revolution, where two worlds collide!"');

header('HTTP/1.0 401 Unauthorized');
echo 'YOU MUST LOG IN TO VIEW THIS PAGE';
exit;

}
?>