Sessions

[UKlee]

Hi guys I have a sessions problem i am using a login that will change menu depending on the user group your are listed in the database.

This all works fine but as i browse through pages my user id or pilot_id changes to that of another person any idea why this would happen .

Any help would be great got me stumped this one as im new to php and sessions.

<?php
session_start(); 
include("dbinfo.inc.php");
mysql_connect("localhost",$username,$code);
mysql_select_db ("$database");


$pilot_id = $_POST['pilot_id']; 
$password = $_POST['password']; 

if((!$pilot_id) || (!$password)){} 

$sql = mysql_query("SELECT * FROM members WHERE pilot_id='$pilot_id' AND password='$password'"); 
$login_check = mysql_num_rows($sql); 

if($login_check > 0){ 
   while($row = mysql_fetch_array($sql)){ 
   foreach( $row AS $key => $val ){ 
      $$key = stripslashes( $val ); 
   } 
      $_SESSION['pilot_id'] = $pilot_id; 
      $_SESSION['password'] = $password; 
      $_SESSION['menu'] =$membership; 
      $meta='<meta http-equiv="refresh" content="0;url=http://www.">';
   } 
} else {  

}?> 

and this logs you in fine i use the following script to display the menu depending on the group your in.

<?php
session_start(); 

include("scripts/dbinfo.inc.php");

$pilot_id = $_SESSION['pilot_id'];
$password = $_SESSION['password'];
$membership =$_SESSION['menu']; 



if ($membership=="member")

{$menu=menu_pilot;} 

else

if ($membership=="staff")

{$menu='menu_staff';} 

else

if (!$membership)

{$menu=menu_guest;}?> 

[kakki]

i think ( on a first glance ), that this:

if((!$pilot_id) || (!$password)){}

is not correct ( i may be mistaken),
but what if i have an illegitimat format like no pilot_id, password ...
then your query will be executed
maybe you can add an "else" to the "if"
like this:
if((!$pilot_id) || (!$password))
{
}
else
{
// your code here
}

[UKlee]

Hi yep I see that but what I was refering to is that once you are logged in and you then look at different pages your id then changes to that of another person . So I login fine but as i look around pages my id is changed and diplays the information of another person rather than that of myself.
im using an index page and using includes to show different elements if that makes sence so when you log in you may get the members menu or staff menu depending on what is set in the datbase pertaining to your user id. Its a bit random to say the least only happening now and again but obviously this wont do .

try it out for yourself perhaps this will help

thanks for looking

Lee

[kakki]

i looked around and didnt see the error, but in the "flight operations" menu, there
was a changing of my ukv1122 to ukv???? ( someone, and i saw his/her email, so i suggest
you put that 1122-account offline ). maybe the error is in this part of the script....

well, i had the same problem and i wrote to all scripts ( or the main-file only )
<!--
<?php
print_r ( $_SESSION );
?> -->
to keep track of my session-variables ....
maybe this can help you with your debugging

[UKlee]

thanks thast offline now but yep that is the problem where the ukv1122 changes I will impliment your debug code and try it out thank you for taking the time to look.

kind regards

Lee

[UKlee]

I have ran this test and used that code but it just seems to be so random and happemed to me on the other menuvery strange I have looked all over but am unsure what is causing this problem.

[kakki]

maybe you can verify the session-variable?

[UKlee]

yep I have no0w solved this problem thanks for all your help KAKKI
regards

Lee