[RESOLVED] Session handling links and assistance

Hootnholler

Hi all,

Does anybody have some good information on how to do session handling of multiple ID information within an URL? As an example...

www.foobar.php?SID=3030220423423&id=33

What I am hoping to do is to try and use session handling within the URL and the second id of information to reference a table in SQL. If a user is logged in, and would like to delete a record, I would like the record to appear on another page, pass the SID as well as the ID and then use the code to reference the SID and the SQL Identifier (ID) (hopefully, that makes sense...).

Is this an instance where truncating would be necessary to remove the id for the SID? or, is there a global variable that allows the definition of different IDs? I'm just coming up empty on how to handle multiple identifiers, more than anything.

Thanks for the time and sorry for the headache... :queasy:

Hoot

sneakyimp

I have no idea what you are asking...sounds like you think that SID and id are somehow getting mixed together or confused which is not the case.

if i visit this page:
http://mydomain.com/myscript.php?SID=123&id=456

then if my source code looks like this:

// MYSCRIPT.PHP

echo 'SID IS:' . $_GET['SID'] . '<br>';
echo 'id IS:' . $_GET['id'] . '<br>';

then i should get this:

SID IS: 123
id IS: 456

no crosstalk at all.

Hootnholler

Hi SneakyImp,

Actually, your answer helped me out tremendously. I'm a complete n00b, but I was trying to find verification that they are handled differently. Your answer provided me with the confidence needed.

To clarify for future information seekers...

The & (ampersand) character will delineate or show a difference in variables. From the original example:

www.foobar.php?SID=3030220423423&id=33

The & will delineate between SID and id (as SneakyImp pointed out for me, thank you! I was having, for some reason, a heckuva time finding this out).

Where I was having an issue... I was calling upon a record that is identified by the id variable in SQL. I wanted to give the user the option to opt out of a deletion. When I passed the Session ID in the URL, without the & sign for the id, I would get an error since there is a limitation to what makes up a session ID (a-z, A-Z and 0-9). It would come across the = sign and error out.

Example: www.foobar.php?SID=3030220423423id=33 will come back with an error, since it thinks that the SID is 303022042342id=33 (I know, obvious at this point... but I didn't know the character for delineation).

For HTML/PHP usage, this is what I used for code to create a simple hyperlink YES/NO redirector...

echo ("<a href=foobarconfirm.php?".SID."&id=$id>YES</a> | <a href=foobar.php?".SID.">NO</a>");

The SID is passed to the next page in both instances (or returned, if you answer NO, to the original page). For the confirmation (selecting YES), the rest of the script will use the $id variable to confirm which record to delete out of SQL, without interfering with the session ID.

As well, the & has to be in the HTML code, not referenced as an identifier within the PHP code (notice the "&id, which is in HTML, not PHP), within my script. If this can be done in PHP, I'm sure someone much more well versed than I will respond.

Again, SneakyImp, thank you for your help. I apologize for the poor wording in my original question, since I seem to have difficulty wrapping my mind around the PHP documentation. Once I see it, the code makes all the sense in the world. Your assurance that they are, indeed, different, made all the difference in the world for me.

Hoot

sneakyimp

You don't really need it for this issue, but for complex string variables to be passed, you might need urlencode() or rawurlencode()

http://php.net/urlencode
http://php.net/rawurlencode

Hootnholler

SneakyImp,

Outstanding! That is even better than my feeble attempts for a simple script.

Now I have to come up with something a bit more complex to try these out on...

Thanks again for your help!

Hoot