What is this and how is it done?

Dada78

Ok this will be my User Accounts Page that will be secured and you will have to log in to get to this area once I get it set up

http://www.mesquitechristmas.com/local/user.php

You will see link on that page that says Edit Profile and this is the link for that page below but when you click on it. All it does it just refresh the page.

http://www.mesquitechristmas.com/local/user.php?action=editprofile

So when you click on that it is suppose to be this page:

http://www.mesquitechristmas.com/local/editprofile.php

I do I open up pages within the user.php that keeps them secure to that user and session.

I haven't worked with php in like 3 years so be gentle.

-Thanks

kkobashi

Which file is responsible for editing the user profile?

This one?
http://www.mesquitechristmas.com/local/user.php?action=editprofile

Or this one?
http://www.mesquitechristmas.com/local/editprofile.php

Dada78

This one is responsible for updating the profile

http://www.mesquitechristmas.com/local/editprofile.php

But I want it to be called on this page

http://www.mesquitechristmas.com/local/user.php

That way the URL looks like

http://www.mesquitechristmas.com/local/user.php?action=editprofile

The user.php will be a secure page user accounts page that you can only get to when you log in. Right now I don't have it secure yet because I am still trying to build the code for it.

Does that make sense?

Dada78

Anyone know how to do this. Is this like HTTP-POST-VARS. I am not sure how to explain my problem but I need the url to be unique with the users ID from the DB so that the user can edit their own profile from that page I list second. If you visit that page and and click on the nav at the top you will get an idea of what I am needing. That user.php will be secure to where only members can get access but it will be for their display.

Joseph07

There are some ways to do that. I'll just list the way where it uses SESSION.

As each user logins to the webpage, you will create a SESSION to stores the userid for the particular user. Thus, it will be like this.

// Check for user login bla bla bla
If (userlogin) {
  $_SESSION['userid'] = $userid;
}

So when the user click on the edit profile, it will call the database and retrieve the data.

// When the user click on the editprofile

$Q = "SELECT * FROM userprofile WHERE userid ="."'".$_SESSION['userid']."'";
$R = mysql_query($Q);
// This way, you will be able to get the user data from the database and then output to the user and let them see.

TheDefender

I agree, Sessions are a better way to manage that (instead of using a POST or GET method of sending the ID). For example, if you used ID passed in the URL, what would stop a member from modifying their URL and editing someone else's profile? Sessions, however, are unique to the user during that surfing session... they are much less susceptible from this kind of malice behavior.