[RESOLVED] Need to store row in session variable

[Timsoft]

Hello,

I am trying to use my authentication script to pull data into a session variable or cookie. Each user has a row with username and password followed by 8-9 more fields of information. I want to use the data on subsequent pages.

I'm pretty sure I need to use the following bit of code in conjunction with my authentication script, but I'm not sure...

//authentication section, also selects the row to be used
$query = "SELECT user_id
FROM user_db
WHERE username = '$userId'
AND password = PASSWORD('$password')";

$result = mysql_query($query) or die(mysql_error());
$row = mysql_fetch_array($result) or die(mysql_error());

I'm not sure how to ge the whole row into the session as a variable...

[bretticus]

Take a look at the basic authentication model I posted recently for another forum user.

[bretticus]

Timsoft;10877811 wrote:

I'm not sure how to ge[t] the whole row into the session as a variable...

You can just store the whole row if you want like so...

session_start();

$query = "SELECT user_id 
           FROM user_db
           WHERE username = '$userId' 
                 AND password = PASSWORD('$password')";


$result = mysql_query($query) or die(mysql_error());
$row = mysql_fetch_assoc($result) or die(mysql_error());

$_SESSION['user'] = $row;

In subsequent pages, you can refer to it like...

$user_id = $_SESSION['user']['user_id'];

NOTE: I did this quick and dirty so you may have to finagle with the session array inside
$SESSION['user'] a bit. You can see the structure via...

print_r($_SESSION);

[Timsoft]

Thanks for your reply, Bretticus. I am still having some trouble with this. I am getting a parse error (Parse error: parse error, unexpected $) on line 51 which has no code, and is after the closing tag.

I have looked over this many times, and can't find any unclosed tags. Is there something else that can cause this parse error.

<?php session_start(); 
//Connect to DB
$username = "xxxxxxx";
$password = "xxxxxxx";
$hostname = "xxxxxxxxxxxx";

$dbh = mysql_connect($hostname, $username, $password) 
	or die("Unable to connect to MySQL");
	if (!$dbh)
  {
  die('Could not connect: ' . mysql_error());
  }


// Verify username and ppassword are entered, then convert them to variables
if (isset($_POST['username']) && isset($_POST['password'])) {


   $userId = $_POST['username'];
   $password = $_POST['password'];


   // check if the user id and password combination exist in database
   $sql = "SELECT user_id 
           FROM user_tbl
           WHERE username = '$userId' 
                 AND password = PASSWORD('$password')";

   $result = mysql_query($sql) 
             or die('Query failed. ' . mysql_error()); 



  //Return Results, place array in session variable
  $result = mysql_query($query) or die(mysql_error()); 

  $row = mysql_fetch_assoc($result) or die(mysql_error()); 

  $_SESSION['user'] = $row;


 // Redirect to main page
  header('Location: main.php');
  exit;




?>

[bretticus]

if (isset($_POST['username']) && isset($_POST['password'])) { 

In your example, at least, in the line above, your if statement has an opening bracket ( { ) but not a closing one ( } ).

[Timsoft]

Excellent, that got rid of the pase error.

Now that the PHP is working, I'm getting something unusal from the MYSQL query.

I returns "query was empty"

I checked my database, and I have a test username and password in correctly, but I can't seem to pull it up from a query. I have run the same query except I put the actual values in instead of the variable, and returned the correct row.

$userId = $_POST['username'];
   $password = $_POST['password'];


   // check if the user id and password combination exist in database

   mysql_query("USE Tpowell04");

//This section looks suspect to me...

   $sql = "SELECT * 
           FROM `6944`
           WHERE username = $userId 
                 AND password = ('$password')";

[bretticus]

Timsoft;10877856 wrote:

I returns "query was empty"

Probably because you call query twice maybe...

   $result = mysql_query($sql)
             or die('Query failed. ' . mysql_error());



  //Return Results, place array in session variable
  $result = mysql_query($query) or die(mysql_error());

Whoops, just noticed the second one tries to use an undefined string: $query. That'll be an empty query alright. Just get rid of it, you don't need it.

[Timsoft]

Thank you sir! After a little work, I've got it so it won't produce any errors. I assume the session is holding the variable, but it didn't follow the redirect set in the header, so I'm not sure.

I'm going to tinker with it a little and see if I can't get it to work. Thank you for your help!

Thread Closed...