another error help please?

natman3

i have a web page that i want to pull information to a table that is related to the person logged in. this is what the page looks like

<?php
include($_SERVER['DOCUMENT_ROOT']."/users/ext_user_profile.php"); 
error_reporting (E_ALL); // I use this only for testing
$update_profile = new Users_profile;

$update_profile->access_page($_SERVER['PHP_SELF'], $_SERVER['QUERY_STRING']); // protect this page too.

//$update_profile->get_profile_data();

$error = $update_profile->the_msg; // error message

?>
<html>
<head>
<title>Admin Page For Content Management System (CMS)</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<script language="JavaScript">
function delArticle(id, first)
{
    if (confirm("Are you sure you want to delete '" + first + "'"))
    {
        window.location.href = 'cms-admin.php?del=' + id;
    }
}
</script>
</head>

<body>

<table width="600" border="0" align="center" cellpadding="5" cellspacing="1" bgcolor="#999999">
<tr align="center" bgcolor="#CCCCCC"> 
  <td width="500"><strong>Title</strong></td>
  <td width="150"><strong>Action</strong></td>
</tr>
<?php

		$result = mysql_query("SELECT * FROM users, collegiate WHERE collegiate.user_id=users.id") or die('Error : ' . mysql_error());
		echo "$result";

while(list($id, $first) = mysql_fetch_array($result))
    {

?>
<tr bgcolor="#FFFFFF"> 
  <td width="500"> 
   <?php echo $first;?>
  </td>
  <td width="150" align="center"><a href="article2.php?id=<?php echo $id;?>" target="_blank">view</a> 
   | <a href="cms-edit.php?id=<?php echo $id;?>">edit</a> | <a href="javascript:delArticle('<?php echo $id;?>', '<?php echo $first;?>');">delete</a></td>
</tr>
<?php
    }
 ?>

</table>
<p align="center"><a href="cms-add.php">Add an article</a></p>
</body>
</html>

i think i need to create a $_SESSION and use that to ensure the correct data is being displayed for the user being logged in. If another user loggs in then he will be brought to the same page but i want different data to be show data that is viewable only to that user. I created two tables one titled 'collegiate' this contains the information that will be displayed. It also has a field 'id' and 'user_id' that is unique to the person that created or submited the data to the table. right now the information does not display correctly on the page if you wish to take a look you may go to http://www.chilepepperfestival.org/user/login.php where i have set up a temp account login name: millerp | password: 1234 once it brings you to the user_coll.php click add/manage link and you can see the issue i am having. It should be pulling up the 'first' which is the name of a person and should display them they are billy,tobby,asp however it instead pulls up the users millern, millerp i dont know why this is happening and its become quite frustrating for me. If anyone can offer suggestions i would be greatful. Thanks always

natman3

i believe that my problem lies within getting the id from the user that is logged in and then comparing it with the collegiate.user_id in the mysql_query(); I am just not sure on how to do this because i think what its doing is looking at both tables and grabing the data that has identical 'id' which means its not getting the id from the currently logged in user. I think something like this might work but i am not sure how to implement it does anyone know?

$current_user = $_SERVER['id'];
			$result = mysql_query("SELECT count(*) FROM collegiate, users WHERE collegiate.user_id= '$current_user'") or die('Error : ' . mysql_error());

nephicheng

$result = mysql_query("SELECT * FROM users, collegiate WHERE collegiate.user_id=users.id") or die('Error : ' . mysql_error());

right there it is printing out millerp, as for why. I do not know since its outputting the resource of the query. It could just be returning the first field from it.

As for you displaying the proper content, I'm not sure what the code is on your original page that says HELLO MILLERP! but it looks as if you're echoing back the user's id. But I'm not sure since I don't know your code.

Anyways, in order to display a user's profile page, the use of cookies or a session makes it a lot easier. You can do another way but that takes too much work. So, you will probably want to make the session or cookie variable( we will start calling it a session variable for simplicity sake) something that is easily referenced in your database. In this example we will use the user's name, because it is unique. So you have the part right about pulling up the article information but you will want to make another database call that pulls out the user's first name.

// gets the resource from the database where we can gather our data
$query= mysql_query( "SELECT firstname FROM mydatabase WHERE userid = userid");

// gets the result from the query, since there is only one name associated to this uniqueid it should only return one row.
$result = mysql_result($query, 0, "firstname");

Now that you have the firstname, you can output it anywhere you choose. with a print $result.

Hope this answers your question.

natman3

I am not sure if its going to work. this is what my table 'collegiate' looks like:

id user_id first last year age gender last_change
1 1 John Erickson sophmore 22 m

2 2 billy boy junior 19 m

6 2 tobby adams freshmen 23

7 2 asd john senior 20 m

as you can see the user_id is tied to the users table 'id' for each registered user.

id login
1 millern

2 millerp

this code here:

$current_user = $_SESSION['id'];

		// matches the session 'id' of login user with the 'user_id' field from the talbe collegiate so that we can select the right content to be displayed
		$logged_id= mysql_query( "SELECT * FROM collegiate WHERE collegiate.user_id = '$current_user'"); 

		// gets the result from collegiate table, there one uniqueid tied to the rows. 
		$result = mysql_query("SELECT * FROM collegiate WHERE collegiate.user_id= '$logged_id'") or die('Error : ' . mysql_error());
		echo "$result";

i am trying to get the table users 'id' of the logged in person and match it to the table collegiate 'user_id' and from that have the correct information display for whoever is logged in by looking at the id.

I am having trouble accomplishing this.

natman3

on the HELLO MILLERP i eching this :<?php echo "Hello ".$_SESSION['user']." !"; ?>

nephicheng

Ok, lets first start by re-arranging your table structure. Your collegiate one looks fine. In the user table you will need to add in a userName field so that we can grab that name to display instead of MILLERP. So you will want to do what I pointed out earlier to get that field.

Now to display the correct fields associated with the user id that is logged in we would do a

// SESSION["ID"] should be the unique id of the current user that is signed in.
$current_user = $_SESSION["ID"];

// Queries the database with the given SQL. since we are selecting from one table we do not need to add a collegiate.FIELDNAME because you only need to do that if you are selecting from two different takes and need to differentiate them.
$query = mysql_query("SELECT * from collegiate WHERE user_id = '$current_user'");

// Iterates through each result
while( $result = mysql_fetch_array($query) )
{
     // display your code in a format that is readable. remember you can access your array through keys so if you wanted to get the FIELD named ID you can say $result["ID"] and that will return that value. the same goes for $result["FIRST"].
}

I hope this sheds more light on what you want to accomplish

natman3

Thanks that helps in understanding it. I just have one problem though. When the user logs in how do i get the id from the users table. The only thing that is in the session is the login name and pw. If that makes sense? Will i need to query the users table and set the $_session like so:

$result = mysql_query ("select * from users where id");
$_session['id'] = $result;

nephicheng

I wouldn't advise on having the user's password in the session. Heres how I would go about with this situation. When the user has logged in, it will verify if the user's name and password. After that is verified, I would create a session variable called something like ID or UID (user id) that contains the user's ID number. The database call will be like this

// After verifying the customer's login

// Sets a query to select the ID from the user table that pertains to this particular userName and password
$query = mysql_query ("SELECT id FROM users WHERE userName='$username' AND password='$password' ");

// gets the result in a variable
$id = mysql_result( $query, 0, "id" );

// sets the session variable
$_session['id'] = $id;

In subsequent pages, you will want to check if $_SESSION["ID"] isset to determine if the user is logged in or not and if it isset then you will continue to load the page else return them to the login page.

natman3

thank you for your suggestion. I have gotten it to work.