Sessions and Frames

clintonandersen

The age old question, how do you get sessions to work with frames? I searched the forum and didn't find anything that could really help me so if anybody can that would be great.

I'm new to PHP and the world alike so I looked for a login script. I found this one:

http://php.codenewbie.com/articles/php/1482/Login_With_Sessions-Page_1.html

I did what it said and everything worked. It made sense and everything was going well until I decided to use frames. Here's where it get's hairy.

The first page is my index page. This is the code:

<?
// Login & Session example by sde
// index.php

// connect to database
include("inc/connect.php");

// include auth and nav
include("inc/auth.php");

// begin content
include("inc/nav.php");

// close mysql connection
mysql_close();
?>

Well it can't authenticate obviously because no session has previously been created so it executes the auth.php which is below:

<html>
<head>
<title>SMC3D Login</title>
</head>
<?
// Login & Session example by sde
// auth.php

// start session
session_start();

// convert username and password from POST or SESSION
if($POST){
$SESSION['username']=$POST["username"];
$SESSION['password']=$_POST["password"];
}

// query for a user/pass match
$result=mysql_query("select * from user_table
where username='" . $SESSION['username'] . "' and password='" . $SESSION['password'] . "'");

// retrieve number of rows resulted
$num=mysql_num_rows($result);

// print login form and exit if failed.
if($num < 1){
echo "<br><br><br><br><br><center><b>Please login to access the SM3CD:</b><br><br>

<form method=POST action=home.php>
Username: <input type=text name=\"username\"><br>
Password: <input type=password name=\"password\"><br><br>
<input type=submit value=Login>
</center></form>";

exit;
}
?>
</html>

Ok, so now after they have logged in and a session is started it takes them to home.php which is actually a framed page.

</frameset>
</head>
</html>

It's basically your standard three framed page. It has a header on top, a menu on the left hand side, and then the body taking up the center and right. Well, instead of the center and right frame displaying index.php (which is the first code I posted) it takes me back to the authentication page and wants me to login. Then it just keeps doing that and the frames keep building up inside of each other. I know there's got to be a fix I'm just not sure what to do from here. Does anybody have any ideas? Your help is appreciated. Thanks

eriksmoen

here's an example of one that I did that seems to work great with frames... just include the "sessions.php" on every script page...

sessions.php

<?
  session_start();

  if(isset($_SESSION['name']))
  {
      if($_SESSION['name'] != "" && $_SESSION['auth'] != null)
      {
          $greeting   = "» ".$_SESSION['name']." ( ".$_SESSION['email']." )";
          $AUTHORITY  = $_SESSION['auth'];
          $WHOAMI     = $_SESSION['name'];
          $MYEMAIL    = $_SESSION['email'];
          $MYUSERID   = $_SESSION['uid'];
          $STATID     = $_SESSION['statid'];
          $MYUSERNAME = $_SESSION['user'];
            $time = time() - ((60 * 23) + 6*60);
	    $date = date("Y-m-d", $time);
            $displacement = 3600 / 2;
            $displaced_time = $time - $displacement;
            $db = @mysql_connect($sqlhost,$sqluser,$sqlpass);
            @mysql_select_db($sqlserv);
            $query1 = @mysql_query("DELETE FROM sessions WHERE time < '$displaced_time';");
            $phit = @mysql_result(@mysql_query("SELECT pages_hit FROM statistics WHERE id='$STATID';"),0,"pages_hit")+1;
            if(@mysql_result(@mysql_query("SELECT user FROM sessions WHERE user='$MYUSERNAME';"),0,"user") == $MYUSERNAME)
            {
                $query2 = @mysql_query("UPDATE sessions SET `time`='$time' WHERE user='$MYUSERNAME';");
                $query3 = @mysql_query("UPDATE statistics SET pages_hit='$phit', logout_time='$time' WHERE id='$STATID';");
            }
            else
            {
                $query2 = @mysql_query("INSERT INTO sessions(`user`,`time`) VALUES('$MYUSERNAME','$time');");
				$query3 = @mysql_query("UPDATE statistics SET `date`='$date',`user`='$MYUSERNAME',`pages_hit`='$phit',`login_time`='$time',`logout_time`='$time' WHERE id='$STATID';");
            }
            @mysql_close($db);
      }
      else
      {
          header("Location: $homeurl/login.php");
          exit();
      }
  }
  else
  {
      header("Location: $homeurl/login.php");
      exit();
  }

?>

<?
  $message = "";
  include("globals.php");
  if(isset($_GET['action']))
  {
      $action = $_GET['action'];
      if($action == "logout")
      {
          session_start();
          $db = @mysql_connect($sqlhost,$sqluser,$sqlpass);
          @mysql_select_db($sqlserv);
          $query1 = mysql_query("DELETE FROM sessions WHERE user='".$_SESSION['user']."';");
          @mysql_close($db);
          $_SESSION['name']  = null;
          $_SESSION['auth']  = null;
          $_SESSION['email'] = null;
          $_SESSION['user']  = null;
          $_SESSION['uid']   = null;
          $_SESSION['statid']= null;
          session_destroy();
      }
  }

  if(isset($_POST['uid']) && isset($_POST['pwd']))
  {
      ini_set('session.gc_maxlifetime',"3600");
      ini_set('session.cache_expire',"360");
      $user = $_POST['uid'];
      $pass = md5($_POST['pwd']);
      session_start();
      $_SESSION['name'] = "";
      include("globals.php");
      @mysql_connect($sqlhost,$sqluser,$sqlpass);
      @mysql_select_db($sqlserv);
      $query = @mysql_query("SELECT * FROM `users` WHERE `username` = '$user' AND `password` = '$pass'; ");
      if(@mysql_result($query,0,"name"))
      {
          session_start();
          $_SESSION['name']  = @mysql_result($query,0,"name");
          $_SESSION['auth']  = @mysql_result($query,0,"authcode");
          $_SESSION['email'] = @mysql_result($query,0,"email");
          $_SESSION['user']  = @mysql_result($query,0,"username");
          $_SESSION['uid']   = @mysql_result($query,0,"id");
          $time = time() - (60 * 23);
	      $date = date("Y-m-d", $time);
          $query2 = @mysql_query("INSERT INTO statistics(`date`,`user`,`pages_hit`,`login_time`,`logout_time`) VALUES('$date','".$_SESSION['user']."','0','$time','');");
          $query3 = @mysql_query("SELECT MAX(id) FROM statistics;");
          $_SESSION['statid']= @mysql_result($query3,0,"MAX(id)");
          header("Location: $homeurl");
          exit();
      }
      else{
          $message = "<BR>invalid username/password combination";
      }
  }
  // HTML STRIPPED FOR EXAMPLE PURPOSES //
?>

the login page is a non-framed page, but if the login is correct, it brings you to framed page with sessions. the frame page contains a hidden frame which refreshes every 10 minutes to keep the session alive. that hidden page just includes the session.php so that it updates the database (for seeing users online) and keeps the session alive... in the event that the user would be reading a long article contained on that site.

hope it helps you or anyone who has the same type of issue...