Session variable changes when moving page

[sonny100]

Hi there,

I'm having a bit of trouble with session variables on a site.

Two variables are set when the user logs in, which are $session['email'] and $session['id'], here is the code from the login script...

$query = ("SELECT email, password, id, username, verified FROM user WHERE email='$email' AND password='$password' AND verified = 'y'");
$result= mysql_query($query);
$row= mysql_fetch_array($result, MYSQL_NUM);

if (mysql_num_rows($result)>0)
{
	session_save_path("C:\Temp");
	session_start();
	$_SESSION['email']= $row[0];
	$_SESSION['id']= $row[2];

This is setting the two variables in the session fine. On each page in the site, I then recall the session details with....

session_save_path("C:\Temp");
session_start();

...in the header.

There is a search page on the site which searches for other users, and when I click on a search result, both the session variables change to that of the user that I have clicked on.

Nowhere on the search results page, or the master details is there code that should be changing the session variables, so I can't figure out why it's changing...

Any thoughts?

[Bjom]

what exactly happens when you

click on a search result

can you find and perhaps paste the code that reacts to that?

[sonny100]

The session is stored on my machine, and i've been checking it every time I move pages, it stays the same on each page click until I click on one of the search results. When I check the session after I have clicked on the search result, and am taken to the next page, the session details change that of the user that I have clicked on in the results....if that makes sense!

Here is the code for the search results page....

$sex = $_REQUEST['sex'];
 $age = $_REQUEST['age'];
 $location = $_REQUEST['location'];
 $interests = $_REQUEST['interests'];


 require_once('code/main.php');


$bang = explode(' ',$interests);
foreach ($bang as $word){
$q .=" AND Interests LIKE '%$word%' ";
}
{
echo "<TABLE BORDER=1 CELLPADDING=0 CELLSPACING=0 BORDERCOLOR=#540EAD>";
$query = "SELECT * from user WHERE sex = '$sex' AND age = '$age' AND location = '$location' $q "; 
$result = mysql_query($query) or die(mysql_error());
while ($row = mysql_fetch_array($result)) {

$id2 = $row['ID'];
$photo = $row['photo'];
$username = $row['username'];
$location = $row['location'];
$email = $row['email'];

echo "

        <TR>
		<TD width=75><a href= 'masterdetails.php?iden=$id2''><img src=upload_images/{$photo} width=150 height=125 /></a></TD>
		<TD width=300 border=1 border-style=\"solid\" border-color=\"RED\" align=left>$username<p>{$row['age']}<p>$location</TD>
        <TD width=300>Interests<p>{$row['interest1']}<p>{$row['interest2']}<p>{$row['interest3']}</TD>
		</TR>";

}
}
echo "</TABLE>"; 

It takes the seach criteria from the form on the previous page (search page) and then just displays it in a table, and it's when I click on the link to that users page that the session changes.

[Bjom]

do you have register globals on? turn it off and see what happens...

and what happens in the included file? could anything from there interfere?

[sonny100]

Yeah register globals is off, and the include file just contains....

<?php

$connection = mysql_connect('localhost', 'xxxx', 'xxxxxxx');
mysql_select_db('find_friends');

?>

Am stumped!!

[Bjom]

I can't see anything wrong in what you posted. One way for finding the error would be that you get and IDE where you execute your code line by line. Eclipse with eclipse pdt and xdebug do a good job....

[mblack0508]

If I understand you correctly, the next page (not the one you posted here) is where the issue is located. We would need to see that code too.