Php login session

[Osai22]

Hello,

I'm trying to create a login page and once the user logs in, I want to user to view all his information in the database table. How can I query this database table with the session variable?

Here is the code for the login page:

<?php
// *** Validate request to login to this site.
if (!isset($_SESSION)) {
  session_start();
}

$loginFormAction = $_SERVER['PHP_SELF'];
if (isset($_GET['accesscheck'])) {
  $_SESSION['PrevUrl'] = $_GET['accesscheck'];
}

if (isset($_POST['login'])) {
  $loginUsername=$_POST['login'];
  $password=$_POST['password'];
  $MM_fldUserAuthorization = "";
  $MM_redirectLoginSuccess = "Useraccount.php";
  $MM_redirectLoginFailed = "loginfailed.php";
  $MM_redirecttoReferrer = false;
  mysql_select_db($database_bridge, $bridge);

  $LoginRS__query=sprintf("SELECT User_name, Password FROM tbl_users WHERE User_name=%s AND Password=%s",
    GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "int")); 

  $LoginRS = mysql_query($LoginRS__query, $bridge) or die(mysql_error());
  $loginFoundUser = mysql_num_rows($LoginRS);
  if ($loginFoundUser) {
     $loginStrGroup = "";

//declare two session variables and assign them
$_SESSION['MM_Username'] = $loginUsername;
$_SESSION['MM_UserGroup'] = $loginStrGroup;	      

if (isset($_SESSION['PrevUrl']) && false) {
  $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];	
}
header("Location: " . $MM_redirectLoginSuccess );
  }
  else {
    header("Location: ". $MM_redirectLoginFailed );
  }
}
?>


And here is the Code for the information page after user have logged in:

<?php require_once('../Connections/bridge.php'); ?>
<?php
//initialize the session
if (!isset($_SESSION)) {
  session_start();
}

// ** Logout the current user. **
$logoutAction = $_SERVER['PHP_SELF']."?doLogout=true";
if ((isset($_SERVER['QUERY_STRING'])) && ($_SERVER['QUERY_STRING'] != "")){
  $logoutAction .="&". htmlentities($_SERVER['QUERY_STRING']);
}

if ((isset($_GET['doLogout'])) &&($_GET['doLogout']=="true")){
  //to fully log out a visitor we need to clear the session varialbles
  $_SESSION['MM_Username'] = NULL;
  $_SESSION['MM_UserGroup'] = NULL;
  $_SESSION['PrevUrl'] = NULL;
  unset($_SESSION['MM_Username']);
  unset($_SESSION['MM_UserGroup']);
  unset($_SESSION['PrevUrl']);

  $logoutGoTo = "account_login.php";
  if ($logoutGoTo) {
    header("Location: $logoutGoTo");
    exit;
  }
}
?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
  }

  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);

  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    

    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
}

$colname_Recordset1 = "-1";
if (isset($_SESSION['MM_Username'])) {
  $colname_Recordset1 = $_SESSION['MM_Username'];
}
mysql_select_db($database_bridge, $bridge);
$query_Recordset1 = sprintf("SELECT * FROM tbl_users WHERE User_name = %s", GetSQLValueString($colname_Recordset1, "text"));
$Recordset1 = mysql_query($query_Recordset1, $bridge) or die(mysql_error());
$row_Recordset1 = mysql_fetch_assoc($Recordset1);
$totalRows_Recordset1 = mysql_num_rows($Recordset1);

Urgent response will be appreciated.

Thanks

[Osai22]

This forum has never been helpful to me, I do not know why. I have posted this code for help ever since and no one seems to reply me.

[crimsonlung]

I do the same exact thing on my website, its pretty easy.

Here is the code to mine:

<?php session_start();
if(isset($_SESSION['login'])){
mysql_connect("localhost","alkouri_alkouri","****");
mysql_select_db("alkouri_grademyvoice");
}
else {
include"redirect.html";}
?>

<iframe src="
<?php echo '../myprofile.php?id=' . $_SESSION[login]; ?>" height="400" width="490">
</iframe><th>

So what this does is create an iframe based on the data in a cell of one of my tables based on the $_SESSION

Hope this helps, if I have misunderstood what your trying to do, can you please provide more detail?

[Osai22]

Hello crimsonlung,

Thanks for your help, what exactly I want to do is to write a code that can query the database as soon as a client logs in. for example, if you have a table with first name, last name, date of birth, country of origin, when a user come to the login form and enter his username and password and clicks login, once the user is logged on, he or she will see all his details on that page.

I do not know if you understand what I mean?

[crimsonlung]

Osai22;10975022 wrote:

Hello crimsonlung,

Thanks for your help, what exactly I want to do is to write a code that can query the database as soon as a client logs in. for example, if you have a table with first name, last name, date of birth, country of origin, when a user come to the login form and enter his username and password and clicks login, once the user is logged on, he or she will see all his details on that page.

I do not know if you understand what I mean?

Oh, this is very easy. I am working on a website that is doing exactly what your asking. To see an example, go to www.grademyvoice.com and register, then click on "my profile" then click on "edit account info"

You will see that its displaying all the information that you submitted at registration.

On my registration page, I use $_SESSION to carry the login cookie over, you can read about sessions. HERE

You can do the same thing when a user logs in. Just carry the login cookie over. I suggest you play around with $_SESSION because it is necessary for what you are trying to do.

After that, you can just query the database based on that $_SESSION data. Here is an example:

$result = mysql_query("SELECT * FROM members WHERE username = '$_SESSION[login]'") or die("could not query db");
$array = mysql_fetch_assoc($result) or die("could not copy array results");

So in this example, I am using PHP to pull the login name out of the session, and query based on that login name and then throw that line of data from SQL into an array. This way I can pull out the data from that array very easily into a HTML field like so:

<table border="1">
<tr>
<th>Main Account Info</th>
<td><input name="first" type="text" id="first" value="<?php echo $array[First];?>"><br>
First Name<br></td>
<td><input name="last" type="text" id="last" value="<?php echo $array[Last];?>"><br>
Last Name<br></td>
<td><input name="email" type="text" id="email" value="<?php echo $array[Email];?>"><br>
Email<br></td>
</tr>
</table>

So the output of this will be 3 fields that display the rows of data from the database.

If you want a simpler output, just echo:

<?php
echo $array[Last] . ", ";
echo $array[First] . "<br>;
echo $array[Email];
?>

This example will produce:

John, Do
[e-mail]

Hope this helps.

[Osai22]

Hello crimsonlung,

Thanks for your help, it worked for me. I do not know if you have come across this error before?
Warning: require_once(../Connections/bridge.php) [function.require-once]: failed to open stream: No such file or directory in /home/tsblloyd/public_html/login.php on line 1

Fatal error: require_once() [function.require]: Failed opening required '../Connections/bridge.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/tsblloyd/public_html/login.php on line 1

I have tried to upload my site on my host server through cpanel and its a php site, the index page and other pages are displaying but when I try to click on the login in section, I get that error above.

Please any help from anyone?

[crimsonlung]

Osai22;10975187 wrote:

Hello crimsonlung,

Thanks for your help, it worked for me. I do not know if you have come across this error before?
Warning: require_once(../Connections/bridge.php) [function.require-once]: failed to open stream: No such file or directory in /home/tsblloyd/public_html/login.php on line 1

Fatal error: require_once() [function.require]: Failed opening required '../Connections/bridge.php' (include_path='.:/usr/lib/php:/usr/local/lib/php') in /home/tsblloyd/public_html/login.php on line 1

I have tried to upload my site on my host server through cpanel and its a php site, the index page and other pages are displaying but when I try to click on the login in section, I get that error above.

Please any help from anyone?

Hmm, I've never seen this error before. The only thing I can think of is that the host you are using does not support a certain function on their installation of PHP

[bradgrafelman]

The error message is quite clear:

No such file or directory

[JVassie]

bradgrafelman;10975221 wrote:

The error message is quite clear:

In other words, the file you want to require/include doesn;t exist in the location you told the require_once() function it would be.

[Osai22]

So how do I solve this problem, how do I make it work, I'm so new to all these things and would like to get a clear explanations or help. Thanks

[bradgrafelman]

You solve the problem by either a) not attempting to require() a file that doesn't exist, or b) upload/create/whatever the file that doesn't exist.