Help!

John_wilson

ok peeps. I'm really confused.

Had a piece of semi working php app, logon worked and such like when using localhost, however accessing remotely it "lost" or forgot the session stuff, I was informed that this is a php age issue ( was using4) so I upgraded to 4.3.0 ( I think) now my logon doesn't pass variables ( or the next form doesn't pick them up).
Logon page ( user enters user name and pass here)

<?
include("header.php");
?>
<html>
<body bgcolor="#000080" text="#ffffff">
<h1><center><u> Welcome </u></center></h1>

<p> To proceed with login please enter your user name and password and click the login button. If you are unsure of you username and password then please ask your teacher.</p>
<form method="GET" name="login" action="login.php">
Username: 
<input type=text name="user"><br> 
Password: 
<input type=password name="pass"><ce> 
<input type=submit value="Log In"> 
</form>

</html>

<?
include("header.php");
include("config.php");
?>
<html>
<body bgcolor="#000080" text="#ffffff">

<?
$logres=@mysql_num_rows(mysql_query("select * from pupils where name='$user' AND password='$pass'")); 
 print("$user, $pass");
if($logres>0)
{
print ("login correct<br>");
 if($user=='admin')
	{
	print ("Please click <A href=admin.htm> here </a> to continue");
	}
	Else
	{
	print ("Please click <A href=index.htm> here </a> to continue");
	}
session_register("user");
}
else
{
print ("incorrect logon<br>");
print ("Please click <A href=logon.php> here </a> to re-try");
}

?>
</html>

Help me! please

John

cahva

I think you have register_globals set to off(thats the default with recent versions of PHP).

You have to use $POST to get the user and pass. For example:

$logres=@mysql_num_rows(mysql_query("select * from pupils where name='".$_POST['user']."' AND password='".$_POST['pass']."'"));

session_register function is also old stuff. Use $SESSION for session variables. (ex. $SESSION['user']=$_POST['user']😉

John_wilson

Cahva, thank you, my login now works again,
need to change the rest of my code but thats fine.

With this new $session bit, I need 3 bits of info.
First, session_register($Varname); used to make the session remember that variable, does $session['var']=$HTTP_VARS_POST['var'];
second, How do I get the var out $var used to work, is that now $_SESSION['var'] ( tried it, doesn't seem to work);
Third, is there a list anywhere of what session stuff does and doesn't work, in 4.3?

Thank you

cahva

Well, the old style still works. You can use it if you like. I myself learned the new way of using sessions and would never go back 🙂

You can populate session vars just like you said($HTTP_VARS_POST['var'] works but its also deprecated) :

$SESSION['var']=$POST['var'];

Good thing is when using $SESSION,$POST,$_GET etc. is that you always know where the variable is coming from.
You can read more about predefined variables here.