Question... Session Variable is not passing..!

THEDAMN316

ok,,,here is my problem
Page1.php

<? session_start();
$dbconn = mysql_connect("127.0.0.1" , "root","");
mysql_select_db("test",$dbconn) or die("unable to connect");
$sql = mysql_query("SELECT * FROM tblusers", $dbconn);
$fetch_em = mysql_fetch_array($sql);

if ($submit)
{

while ($data=mysql_fetch_array($sql))
{
if ($password == $fetch_em["password"])
if ($username == $fetch_em["username"])
{
$valid_user=1;
}
}

if ($valid_user==1)
{
//header("location:display.php");

	//session_register('ok123');

	$_SESSION['ok123']='yes';

	//echo $_SESSION['ok123'];
}

}
?>

<form name=submitinfo action=check.php method=post>
<p>User Name: <input type="text" name="username" size="20"></p>
<p>Password:  <input type="text" name="password" size="20"></p>
<p><input type="submit" value="log in" name="submit">
<input type="reset" value="Reset" name="reset"></p>
</form>

Page2

<?PHP
session_start();
echo $_SESSION['ok123'];
?>

all what i'm trying to do is to pass the session Variable $_SESSION['ok123']='yes';
to page2 and then echo the session variable..
Thanks in adavance

bpat1434

So what's your problem?

~Brett

THEDAMN316

well... the session variable doesn't wanna be sent to the other page,,
when i click submit i should be able to see age to with a "yes" if the user get granted,,,and i have made sure that my code connects to the database and it does the matching depending on the criteria defined...which is username and password,,

thorpe

your form doesnt submit to page2, it submits to check.php.

THEDAMN316

sorry,,i used page2 for simplicity....but it is fine like that,..
the name of the other page is check.php...
Thanks

bpat1434

here's how I'd do it:

<?php
//-----[ Check.php ]-----\\
if ($_POST['submit'] == 'log in')
{
	$username = $_POST['username'];
	$password = $_POST['password'];

$dbconn = mysql_connect("127.0.0.1" , "root","");
mysql_select_db("test", $dbconn) or die("unable to connect");
$sql = @mysql_query("SELECT * FROM tblusers WHERE username = '$username' AND password = '$password' LIMIT 1", $dbconn);

if(mysql_num_rows($sql)<1)
{
	echo "Invalid Login";
	$valid_user = 0;
}
else
{
	$valid_user == 1;
}

if ($valid_user == 1)
{
	session_start();
	$_SESSION['ok123']='yes';
	var_dump($_SESSION);
	header("Location: page2.php");
}
}
?>

<?php
//-----[ Page2.php ]-----\\
session_start();
echo $_SESSION['ok123'];
var_dump($_SESSION);
?>

<!-- page1.php -->
<form name="submitinfo" action="check.php" method="post">
<p>User Name: <input type="text" name="username" size="20"></p>
<p>Password: <input type="text" name="password" size="20"></p>
<p><input type="submit" value="log in" name="submit">
<input type="reset" value="Reset" name="reset"></p>
</form>

See what that gives you, and the var_dump should give you everything in the Session array.

~Brett

thorpe

well if your form is going straight to page2, the session vars aren't being set anywhere.

the code youve shown, shows a form that needs to post back to itself, set the session var, THEN go to page2.

THEDAMN316

bpat1434... this is one way of doing it BUT,,, could i do it this way instead//and if not WHY..?

PHP:

<?php
//-----[ Check.php ]-----\
if ($POST['submit'] == 'log in')
{
$username = $POST['username'];
$password = $_POST['password'];

$dbconn = mysql_connect("127.0.0.1" , "root",""); 
mysql_select_db("test", $dbconn) or die("unable to connect"); 
$sql = @mysql_query("SELECT * FROM tblusers WHERE username = '$username' AND password = '$password' LIMIT 1", $dbconn); 

if(mysql_num_rows($sql)<1) 
{ 
    echo "Invalid Login"; 
} 
else 
{ 
    while ($data=mysql_fetch_array($sql)) 
    { 
        if ($password == $data["password"] && ($username == $data["username"]) 
        { 
            $valid_user = 1; 
    session_start(); 
    $_SESSION['ok123']='yes'; 
    var_dump($_SESSION); 
    header("Location: page2.php"); 

     } 
        else 
        { 
            $valid_user = 0; 
        } 
    } 
}

}
?>

<?php
//-----[ Page2.php ]-----\
session_start();
echo $SESSION['ok123'];
var_dump($SESSION);
?>

bpat1434

You could, but let me ask you this:

Why would you pull all the rows in the database if you only need one? In which case, why see if both the given password and username are equal to rows when you can do so in your query, and get a straightforward answer as to whether or not the user is there, and supplied the correct password? Why do you want break it up into other steps?

And please, please, please use [php][/php] tags.

~Brett

THEDAMN316

tHANKS,, IT WORKED