Passing query to another page

[denverc]

Hello, I am really discovery that php is quite different from asp.

I have just got success in showing a username after login, but the problem I am having now.

I want the user to be able to go to his profile, this mean that I have a link that says, "update profile" and the link points to the page and then "?userID=" then it has the binding of the userID from the recordset. But everytime I log in, it takes me to record 1 and that does'nt change no matter who I log on.

Can anybody help me? I appreciate the help.

Chuck - Denver

[paulnaj]

Hi Chuck,

I think you're going to have to show us some code - not all of it - try and work out which bit's going wrong.

Like ...

1. the code that generates the link (or the html whatever)
2. the code that processes the variables passed to the page

Remember to over-write any sensitive code (urls, password, database names etc)

P.

[denverc]

<a href="profile_update.php?userID=<?php echo $row_rs_welcome['userID']; ?>">Update Profile</a>

[denverc]

Hi Paul, I posted the code that shows the link going to the profile page. This is the code on the page i am sending the link to...

<?php require_once('Connections/conn_users.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    

    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$colname_rs_update_profile = "-1";
if (isset($_GET['userID'])) {
  $colname_rs_update_profile = $_GET['userID'];
}
mysql_select_db($database_conn_users, $conn_users);
$query_rs_update_profile = sprintf("SELECT * FROM customers WHERE userID = %s", GetSQLValueString($colname_rs_update_profile, "int"));
$rs_update_profile = mysql_query($query_rs_update_profile, $conn_users) or die(mysql_error());
$row_rs_update_profile = mysql_fetch_assoc($rs_update_profile);
$totalRows_rs_update_profile = mysql_num_rows($rs_update_profile);
?>

[paulnaj]

That looks OK - what about the code in profile_update.php that processes the userID?

EDITED - just noticed your further post - will look at that now. P

[paulnaj]

Ok can't see anything obvious yet, but a quick debug might help.

Try just echo-ing out $query_rs_update_profile to the browser just before you pass it to mysql_query() - just to see if it's what you expect.

P.

[denverc]

Being somewhat naive here, I am not sure of what you are saying. I would have to have some kind of an example of what you are saying. By the way, I really appreciate the help that you are giving me.

[paulnaj]

Hi,

Er - just put...

echo $query_rs_update_profile;

.. on the line after ...

$query_rs_update_profile = sprintf("SELECT * FROM customers WHERE userID = &#37;s", GetSQLValueString($colname_rs_update_profile, "int"));

That'll print the string out to the browser so you can see that the userID has made it through as expected.

P.

Have to ask - did you write this code?

[denverc]

Hi Paul,

It pulls the record set for the first record, which is all I am getting the link to point to also.

[paulnaj]

Do you mean it prints out ...

SELECT * FROM customers WHERE userID = -1

...?

[denverc]

Yes, it prints out....

SELECT * FROM customers WHERE userID = -1

Sorry about that, still learning the jargon

[denverc]

But I guest that would be correct, "prints out" Never thought of it like that, but makes perfect sense.

[paulnaj]

Ok Chuck,

So either userID is being passed to the page regardless (probably), or somehow $_GET is not being set (unlikely).

In the browser, after clicking the 'Update profile' link is what does it say in the address bar.

Does it say 'http:// ... profile_update.php?userID=-1' or if you've logged in as userId=3 say, does it say 'http:// ... profile_update.php?userID=3' ?

P.

[denverc]

Yes, no matter what user I log in when testing, it shows up in the address line as
'http:// ... profile_update.php?userID=-1'. Even when I know for sure it is not user 1 in the database. I have also looked to make sure that _GET has been set on the sending and receiving pages recordsets. I am definilty stumped on this one.

[paulnaj]

Are you able to post the url to the page where the 'Update profile' so I can see the output for myself? Don't if there's any sensitive data visible, of course.

P.

[denverc]

Give me a moment so I can set the database correctly on the server, the data is not sensitive.

[denverc]

Hi Paul,

Here is the url to the login page. Not much there, just building applications.

http://www.lovesmeeting.com/Shop/index.php

[denverc]

The only way I can get it to show user 1 also, is when I change the variable in the recordset to "entered value" and nor URL parameter.

[denverc]

a username and password are

chuck
tiawia

[denverc]

The for another one,

Rich
chuck

Sorry for all the posting, I can always change these, that is why I don't care about listing them right now, no sensitive information.