sending session varaibles from a table

tazgalsinh

<?
// get all off the owners details and store in variable 
	$ownerdetails = @mysql_query("SELECT DISTINCT h.HorseName ,h.OwnerName, t.HorseAge, t.HorseHeight, t.TrainerName  FROM JC_horseowner h LEFT JOIN JC_horse t ON h.HorseName = t.HorseName WHERE OwnerName = \"$ownernames\" ORDER BY HorseName ASC"); // sql tou get all ownernames
	//display owners details
		while($row=mysql_fetch_array($ownerdetails)) {
   		            echo "<tr>";
					echo "<td>" . (htmlspecialchars($row['HorseName'])) . "</td>\n";
					echo "<td>" . (htmlspecialchars($row['HorseAge'])) . "</td>\n";
					echo "<td>" . (htmlspecialchars($row['HorseHeight'])) . "</td>\n";
						$_SESSION['horse'] = $row['HorseName'];
						$_SESSION['trainer'] = $row['TrainerName'];
      		        echo '<td><a href="change_trainer.php';
					echo "\">";
			        echo (htmlspecialchars($row['TrainerName']))."</a></td>";
					echo "</a></tr>";
					}	

?>

From this table I want to give the session variable the name of the horse and trainer name. As you can see there is a link to the next page. How would I do this so that depending on what row the user clicks it changes the value of the session.

NogDog

What you may want to do is add the info to a URL query string on each link, then get the values from the $GET array on the target page:

printf("<td><a href='change_trainer.php?HorseName=%s&TrainerName=%s'>",
       urlencode($row['HorseName']), urlencode($row['TrainerName']));

Then when the user clicks a given link, in change_trainer.php the values will be available in $_GET['HorseName'] and $GET['TrainerName'] (and if desired, you could assign them to $SESSION elements at that point).

tazgalsinh

hi, thanks for reply.

If i do this the way you have suggested. The horsename and trainername is still displayed in the URL think am trying to avoid. It will stop people changing details for horses which they do not own.

tazgalsinh

if this is not possible, is there anyway to do some error trapping.

Am thinking of a IF statement saying that if user logged is not the owner of the horse do not process the update database script? sound a good idea?

NogDog

tazgalsinh wrote:
if this is not possible, is there anyway to do some error trapping.

Am thinking of a IF statement saying that if user logged is not the owner of the horse do not process the update database script? sound a good idea?

Sounds like a reasonable validation to do regardless of the method you use to transmit the data.