Great. Thanks for the clarification.
Now, for the code. I've taken a stab at it.
The login.php page initializes the Session as follows:
// start session
session_start();
$_SESSION['User'] = $User;
$_SESSION['FirstName'] = $FirstName;
$_SESSION['LastName'] = $LastName;
$_SESSION['CompanyID'] = $CoID;
$_SESSION['valid_log'] = array($_SERVER['REMOTE_ADDR'], $User);
All subsequent pages check the session to make sure the user logged in:
session_start();
if ($_SESSION['valid_log'][0] != $_SERVER['REMOTE_ADDR'] ||
$_SESSION['valid_log'][1] != $_SESSION['User'])
{
//redirect to error page
echo '<META HTTP-EQUIV="Refresh" Content="1; URL=../error_access.html">';
exit();
}
User submits a form.
echo '<form name="form" post="formpost.php">';
echo '<input type="text" name="EmployeeFirst">';
echo '<input type="submit" name="formpost">';
echo '</form>';
How do I add info to session?
/* add form data to session variables */
session_start();
//check that user is logged in
if ($_SESSION['valid_log'][0] != $_SERVER['REMOTE_ADDR'] ||
$_SESSION['valid_log'][1] != $_SESSION['User'])
{
//redirect to error page
echo '<META HTTP-EQUIV="Refresh" Content="1; URL=../error_access.html">';
exit();
}
//add form variables to session
$_SESSION['EmployeeFirst'] = $EmployeeFirst;
How do I call info from session to display in the Web page?
print "$EmployeeFirst";
How do I clear the temporary session variables?
// clear session variable that contains temporary form data
session_unregister("EmployeeFirst');
Is this right or do I need to change anything?
