[RESOLVED] Updating SQL Table

[soccadude]

So my code is

<?php 
include ("config.php");
mysql_connect($server,$db_user,$db_pass);
$level = "1";
$mylevel = "UPDATE users SET level = '$level' WHERE username = '$myusername'";
mysql_query($mylevel);
mysql_close();
?>

or this one

<?php 
include ("config.php");
mysql_connect($server,$db_user,$db_pass);
if (!isset($_SESSION['count'])) {
  $_SESSION['count'] !=0;
$mypage = "UPDATE users SET page = '3l' WHERE username = '$myusername'";
mysql_query($mypage);
mysql_close();
}
else
{
echo "Not working";
}
?>

I established a session on a previous page.

I tried typing session_start(); at the beginning and it gave me the error

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sen

. So, I took it out when I load the page it does nothing. Interesting..

I don't get the not working command, so The above command is coming true. Just nothing is happening. I'm sorry, I suck at php.

[ixalmida]

You need session_start() on every page that relies on session variables, and session_start() must be before any output.

If you aren't sure whether some other include() established a session, you can check it pretty easily:

if(! isset($_SESSION))
  session_start();

The MySQL connection is a different matter. It can be nearly anywhere in your code. I put my MySQL connection statements into a separate file and include it only when needed. If you have a typical site, you probably won't connect to the database on every page. You can use the include_once() statement to avoid duplicating your connection if that's a concern for you.

[soccadude]

Login.php

session_start();
$myusername=$_POST['username'];
$mypassword=$_POST['password'];
$sql="SELECT * FROM $table WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);
$count=mysql_num_rows($result);
if($count==1)
{
session_register("username");
session_register("password");
$username=$_POST['username'];
$password=$_POST['password'];
}
else
{
header("location:index.php");
}

Obviously there is more filler stuff above, however this is the part I'm concerned with.

Updatepages.php

<?php
session_start();
include ("config.php");
$_SESSION['username'] = $user;
$_SESSION['password'] = $pass;

$query="update `users` set `page`='$currenpage' where `username`='$user' and `password`='$pass'";
$result=@mysql_query($query) or die(mysql_error());
?>

I set in a user and password that was in the database and it updated the page.

Page1.php

<?php
session_start();
$currentpage="Page1";
include ("config.php");
include ("updatelpage.php");
?>

Nothing happens, why??

[ixalmida]

If you're still getting "headers already sent" then there is something being output first - perhaps another error message? Any output qualifies as previous headers - including the HTML headers themselves. Your best bet for using session_start() is to make sure it is the first line of any page. That means no includes before you use session_start().

You should also check the manual pages often. You're mired in some archaic code, aka session_register():

// Use of session_register() is deprecated
$barney = "A big purple dinosaur.";
session_register("barney");

// Use of $_SESSION is preferred, as of PHP 4.1.0
$_SESSION["zim"] = "An invader from another planet.";

Here's what your login.php code should look like:

session_start();
$myusername=$_POST['username']; 
$mypassword=$_POST['password']; 
$sql="SELECT * FROM $table WHERE username='$myusername' and password='$mypassword'"; 
$result=mysql_query($sql); 

// Redirect user if no results are found...
if(mysql_num_rows($result) != 1) 
  header("location:index.php"); 

// Otherwise, continue...
$_SESSION["username"] = $myusername; 
$_SESSION["password"] = $mypassword;

[ixalmida]

Ammend that to "first line of any base page". Hopefully you aren't trying to start the session from an included file.