PHP - Account $_session's Lost When Idle - Only Some Sessions

I'm creating a script and having problems with the log in portion using sessions.  Everything works fine when I set the sessions for the log in which is in the root directory.  The problem arises when I try to create an admin area and cross from the user side to the admin side which is in a different directory of its own.  I do an echo to check for the sessions in admin area and all are lost.

/root <--sessions work 100%

Click link to go to

/root/admin  <--- sessions are lost

and yes all pages have session_start()

Any advice would gladly be appreciated!

Thanks


Here is login code:

<?php
session_start();

include("admin/db/db_connect.php");


$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];


$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM members WHERE user_name='$myusername' and user_pass='$mypassword'";

$result=mysql_query($sql);

$rows=mysql_fetch_array($result);

$status = $rows['status'];
$user_id = $rows['user_id'];

if(($status!="") && ($status==0)){

$m="Your Account has not been activated or is suspended!";

$m = base64_encode($m);

header("location:login.php?m=$m");
exit();
}

$count=mysql_num_rows($result);


if($count==1){



$_SESSION['myusername'] = $myusername;
$_SESSION['myuser_id'] = $user_id;

if($user_id == "1"){

$_SESSION['admin'] = $myusername . $user_id;

}


//echo $user_id . $myusername."<p></p>";

//echo $_SESSION['myusername'] . $_SESSION['myuser_id'] . $_SESSION['admin'];
//exit();

$m="Login Successful!";

$m = base64_encode($m);

header("location:members.php?m=$m");
}
else {

$m="Login Failed, Please Try Again!";

$m = base64_encode($m);

header("location:login.php?m=$m");


}
?>

That works fine for members area and other files in root:
<?php
session_start();
include("inc/vars.php");
include("admin/db/db_connect.php");
include("inc/page_header.php");

if(!isset($_SESSION['myusername'])){
header("location:login.php");
}
?>

<?php 
$m = $_GET['m'];

$m = base64_decode($m);

?>

<?php include("inc/page_footer.php");?>

But it doesn't for this script in admin:

<?php
session_start();

$log = $_SESSION['myusername'];
$in  = $_SESSION['myuser_id'];
$key = $log . $in;

echo "<p>-->". $log . $in ."<--</p>";

echo $key."<-- Key"; 
exit();                 //testing

if($_SESSION['admin'] !== $key){
header("location:/login.php");
}

$ImageDirx = "../sopImages/";

$func = $_GET["func"];
$picid = $_GET["picid"];
$dothis = $_GET["dothis"];

if($func != "" && $picid != "" && $dothis != ""){


   function DoDelete($picid,$dothis) {

        include ("../inc/vars.php");
        include ("db/db_connect.php");
        include ("admin_header.php");

$query ="SELECT * FROM listings WHERE picid='$picid'";
$result = mysql_query($query);
        $row = mysql_fetch_array($result);
        $delete = $row["imagefile"];

        // Delete image from server & DATABASE

        //echo $ImagePth . $delete;exit();

$sql = "DELETE FROM listings WHERE picid='$picid'";
$result = mysql_query($sql);

        @unlink($ImagePth . $delete);

   }

   function DoStatusC($func,$picid,$dothis) {

        include ("../inc/vars.php");
        include ("db/db_connect.php");
        include ("admin_header.php");

if($func == hold){ $Nactive = "n"; }
else{ $Nactive = "y";}


$query ="SELECT * FROM listings WHERE picid='$picid'";
$result = mysql_query($query);

$myrow = mysql_fetch_array($result);

$picid = $myrow["picid"];
$active = $myrow["active"];

$sql ="UPDATE listings SET active='$Nactive' WHERE picid='$picid'";
$result = mysql_query($sql);

   }

   if($func == "delete"){ DoDelete($picid,$dothis); }
   else { DoStatusC($func,$picid,$dothis); }

}

if (empty($_GET["dothis"])) { shownew(); Die(); }
else {$dothis = $_GET["dothis"];}

if($dothis == "echonew"){shownew(); die();}
elseif($dothis == "echoactive"){showactive(); die();}
elseif($dothis == "echoall"){showall(); die();}
elseif($dothis == "resetDB"){DoresetDB(); die();}


  // Retrieve all images from the db
function showall() {

  include("../inc/vars.php");
  include ("db/db_connect.php");
  include ("admin_header.php");


  $query = "SELECT * FROM listings ORDER BY id DESC";
  $result = mysql_query($query);
  $num = mysql_num_rows($result);
  if ($num == "0") {print("No Results");include("admin_footer.php"); die();}
  if ($num < "20") {$Xwarning = "WARNING: There are not enough images for this script to work correctly.<br>";}
  print("<font color='red'>$Xwarning</font>");
  print("<font color='blue'>$num</font> Image(s)<br>");
  if($num > 0){

    $i=0;

    echo "";
    while($i < $num){

      $id = mysql_result($result, $i, "id");
      $owner_id = mysql_result($result, $i, "owner_id");
      $picid = mysql_result($result, $i, "picid");
      $imagename = mysql_result($result, $i, "imagename");
      $imagefile = mysql_result($result, $i, "imagefile");
      $active = mysql_result($result, $i, "active");

        $query2 ="SELECT * FROM members WHERE user_id='$owner_id'";
$result2 = mysql_query($query2);
        $myrow2 = mysql_fetch_array($result2);
        $name = $myrow2["user_name"];

      if ($active == "n") {$status = "Hold";}
      else {$status = "Active";}
      if ($active == "n") {$statusL = "<a href=\"inedx.php?func=allow&picid=$picid&dothis=echoall\">Click to Allow</a>";}
      else {$statusL = "<a href=\"index.php?func=hold&picid=$picid&dothis=echoall\">Click to Hold</a>";}
      echo "<table border=\"0\" cellspacing=\"1\" style=\"border-collapse: collapse\" bordercolor=\"#111111\" width=

\"585\">
      <tr><td width=\"237\"><img src='../i.php?src=/".$ImageDir."".$imagefile."&amp;h=&amp;w=150&amp;zc=0'></td>
      <td width=\"341\" valign=\"top\"><b>Submitted By:</b> <a href=\"member.php?user_id=".$owner_id."\">".

$name."</a><br><b>Website:</b> ".$website."<br><b>Image Name:</b> ".$imagename."<br><b>Status:</b> ".$status."<br><br><a 

href=\"index.php?func=delete&picid=$picid&dothis=echoall\">Delete</a> | ".$statusL."</td>
    </tr>\n</table><hr color=\"#0000FF\" align=\"left\" width=\"570\" size=\"1\">";

      $i++;
    }
    echo "";
  }
include("admin_footer.php");
}

function shownew() {
  // Retrieve all new images from the db

  include("../inc/vars.php");
  include ("db/db_connect.php");
  include ("admin_header.php");

  $query = "SELECT * FROM listings WHERE active='n' ORDER BY id DESC";
  $result = mysql_query($query);
  $num = mysql_num_rows($result);
  if ($num == "0") {print("No Results"); include("admin_footer.php"); die();}
  print("<font color='blue'>$num</font> Image(s)<br>");
  if($num > 0){

    $i=0;

    echo "";
    while($i < $num){

      $id = mysql_result($result, $i, "id");
      $owner_id = mysql_result($result, $i, "owner_id");
      $picid = mysql_result($result, $i, "picid");
      $imagename = mysql_result($result, $i, "imagename");
      $imagefile = mysql_result($result, $i, "imagefile");
      $active = mysql_result($result, $i, "active");

        $query2 ="SELECT * FROM members WHERE user_id='$owner_id'";
$result2 = mysql_query($query2);
        $myrow2 = mysql_fetch_array($result2);
        $name = $myrow2["user_name"];

      if ($active == "n") {$status = "Hold";}
      else {$status = "Active";}
      if ($active == "n") {$statusL = "<a href=\"index.php?func=allow&picid=$picid&dothis=echonew\">Click to Allow</a>";}
      else {$statusL = "<a href=\"index.php?func=hold&picid=$picid&dothis=echonew\">Click to Hold</a>";}
      echo "<table border=\"0\" cellspacing=\"1\" style=\"border-collapse: collapse\" bordercolor=\"#111111\" width=

\"585\">
      <tr><td width=\"237\"><img src='../i.php?src=/".$ImageDir."".$imagefile."&amp;h=&amp;w=150&amp;zc=0'></td>
      <td width=\"341\" valign=\"top\"><b>Submitted By:</b> <a href=\"member.php?user_id=".$owner_id."\">".

$name."</a><br><b>Website:</b> ".$website."<br><b>Image Name:</b> ".$imagename."<br><b>Status:</b> ".$status."<br><br><a 

href=\"index.php?func=delete&picid=$picid&dothis=echonew\">Delete</a> | ".$statusL."</td>
    </tr>\n</table><hr color=\"#0000FF\" align=\"left\" width=\"570\" size=\"1\">";

      $i++;
    }
    echo "";
  }
include("admin_footer.php");
 }

function showactive(){
  // Retrieve all Active images from the db
  include("../inc/vars.php");
  include ("db/db_connect.php");
  include ("admin_header.php");


  $query = "SELECT * FROM listings WHERE active='y' ORDER BY id DESC";
  $result = mysql_query($query);
  $num = mysql_num_rows($result);
  if ($num == "0") {print("No Results");include("admin_footer.php"); die();}
   if ($num < "20") {$Xwarning = "WARNING: There are not enough images for this script to work correctly.<br>";}
  print("<font color='red'>$Xwarning</font>");
  print("<font color='blue'>$num</font> Image(s)<br>");
  if($num > 0){

    $i=0;

    echo "";
    while($i < $num){

      $id = mysql_result($result, $i, "id");
      $owner_id = mysql_result($result, $i, "owner_id");
      $picid = mysql_result($result, $i, "picid");
      $imagename = mysql_result($result, $i, "imagename");
      $imagefile = mysql_result($result, $i, "imagefile");
      $active = mysql_result($result, $i, "active");

        $query2 ="SELECT * FROM members WHERE user_id='$owner_id'";
$result2 = mysql_query($query2);
        $myrow2 = mysql_fetch_array($result2);
        $name = $myrow2["user_name"];

      if ($active == "n") {$status = "Hold";}
      else {$status = "Active";}
      if ($active == "n") {$statusL = "<a href=\"index.php?func=allow&picid=$picid&dothis=echoactive\">Click to 

Allow</a>";}
      else {$statusL = "<a href=\"index.php?func=hold&picid=$picid&dothis=echoactive\">Click to Hold</a>";}
      echo "<table border=\"0\" cellspacing=\"1\" style=\"border-collapse: collapse\" bordercolor=\"#111111\" width=

\"585\">
      <tr><td width=\"237\"><img src='../i.php?src=/".$ImageDir."".$imagefile."&amp;h=&amp;w=150&amp;zc=0'></td>
      <td width=\"341\" valign=\"top\"><b>Submitted By:</b> <a href=\"member.php?user_id=".$owner_id."\">".

$name."</a><br><b>Website:</b> ".$website."<br><b>Image Name:</b> ".$imagename."<br><b>Status:</b> ".$status."<br><br><a 

href=\"index.php?func=delete&picid=$picid&dothis=echoactive\">Delete</a> | ".$statusL."</td>
    </tr>\n</table><hr color=\"#0000FF\" align=\"left\" width=\"570\" size=\"1\">";

      $i++;
    }
    echo "$warning";
  }
include("admin_footer.php");
}
?>

Hi all,

Here i have a serious problem. I want to sought it out using PHP and MySQL only.
I have a form includes fields of customer id and Account type( stored in a jump menu and includes 6 different types of accounts)


<style type="text/css">
<!--
body,td,th {
font-size: 18px;
font-weight: bold;
}
-->
</style>
<p><img src="../images/mahapitiya 1.jpg" width="1024" height="139" /></p>
<form id="form1" name="form1" method="post" action="">
  <label>
    <input type="submit" name="button" id="button" value="Logout" />
  </label>
</form>
<p>&nbsp;</p>
<form action="" method="post" name="form2" id="form2" 
onsubmit="return Validate();">
  <fieldset>
    <legend class="cap">Create an Account</legend>
    <table width="75%" border="0" cellspacing="0" cellpadding="5" align="center">
      <tr>
        <td>&nbsp;</td>
        <td class="title02">&nbsp;</td>
        <td>&nbsp;</td>
        <td>&nbsp;</td>
      </tr>
      <tr height="30">
        <td width="10%">&nbsp;</td>
        <td width="25%" class="title02" align="left">Customer ID</td>
        <td width="55%" class="attribute1" align="left"><input type="text" name="customer_id" class="attribute1" /></td>
        <td width="10%">&nbsp;</td>
      </tr>
      <tr height="30">
        <td>&nbsp;</td>
        <td width="25%" class="title02" align="left">Account Type</td>
        <td width="55%" align="left" bgcolor="#FFFFFF" class="attribute1"><select name="account_type" id="jumpMenu" >
            <option selected="selected"></option>
            <option>Savings Investment</option>
            <option>Shakthi</option>
            <option>Surathal</option>
            <option>Abhimani Plus</option>
            <option>Yasasa Certificates</option>
            <option>Fixed Deposits</option>
          </select>&nbsp;</td>
        
        <td width="10%">&nbsp;</td>
      </tr>
    </table>
    <p align="center">&nbsp;</p>
    <p align="center">
      <input type="submit" onclick="return Validate();" name="submit" value="Submit" class="attribute1" />
      &nbsp;&nbsp;
      <input type="reset" name="reset" value="Reset" class="attribute1" />
      &nbsp;&nbsp;
      <label>
        <input type="submit" name="button2" id="button2" value="Help" />
      </label>
    </p>
  </fieldset>
  </td>
  <td width="5%">&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td align="center">&nbsp;</td>
    <td>&nbsp;</td>
  </tr>
  <tr>
    <td>&nbsp;</td>
    <td><font color="red" size="1" ></font></td>
    <td>&nbsp;</td>
  </tr>
  </table>
</form>
<p>&nbsp;</p>

<script language = "Javascript">
  
function Validate()
{
    if (document.form2.customer_id.value == '') 
    {
        alert('Please enter the valid customer id!');
        return false;
}
else if ( document.form2.account_type.selectedIndex == '' )
    {
        alert ( "Please select an account type!." );
        return false;
    }
return true;
}
</script>



There are 6 different types of tables exist in my database representing 6 different types of accounts.Each and every table there is a field called "account number" which is auto incremented.When user clicks on submit button i want account number to be opened based on selected account type.

How this could be done?

Thanks,
Heshan.

First let me explain my code.
It comprises of three php files.

inc_fn_header_and_menu.php,  contains the HTML and CSS header details and it initializes the session via session_start();

 

This  is later included in project_status.php] .

 

In project_status.php] , I have included another file project_status_app.php which contains a HTML form.

 project_status.php:

<?php
 include 'inc_fn_header_and_menu.php';
function includeFile($file,$variable) {
    $var = $variable;
    include($file);
}
if (isset($_GET['id']) && $_GET['id']!="") {
    $pid    = $_GET['id'];
    $_SESSION['pidForApproval'] = $_GET['id'];
    $query = 'SELECT * FROM `profile` WHERE pid ='.'\''.$pid.'\'';
    $result=mysqli_query($db,$queryToRetrievePP) or die("There are no records to display ... \n" . mysqli_error());
    foreach ($result as $row) {
        $status = $row['status'];
    }        
}
...........some PHP and HTML code.......
	<div id="customerPurchaseApprovalForm">
<?php  
  echo '<p>APPROVAL FOR CUSTOMER PURCHASE</p>';
  $discountApprovalStatus = "Granted";
  if ($discountApprovalStatus == "Granted") {  
 
  includeFile("project_status_app.php",$highestannualvalue);
  } else {
     //.........
  }

In project_status_app.php I am attempting to retrieve pidForApproval from the $_SESSION array.

<?php
        // put your code here  UPDATE `pp` SET `customer_purchase_remarks` = 'hahaha' WHERE `pp`.`id` = 207;
        
        if ($_SERVER['REQUEST_METHOD'] == 'POST') {
            include '../../inc/fastlogin.php';      
            $sql = "UPDATE pp SET customer_purchase_remarks ='{$_POST['remarkstxt']}' WHERE pp.pid='{$_SESSION['pidForApproval']}'"; 
            $result = mysqli_query ( $fastdb, $sql ) ;
            if (mysqli_affected_rows($fastdb) != 1) { 
               $_SESSION['err_cpa_rmks'] = "<p>Error while updating WHERE id='{$_SESSION['pidForApproval']}'</p>";
                //echo "<p>Error while updating WHERE id='{$_POST['pidForApproval']}'</p>".mysqli_error($fastdb);                 
            } else { 
                $_SESSION['suc_cpa_rmks'] = "<p>Records was updated successfully.</p>";
                //echo "Records was updated successfully."; 
            }
            header ("location: project_status.php?id="$_SESSION['pidForApproval']);
            exit();
        }    
        
        ?>

When I load  project_status.php,  project_status_app.php is supposed to display the form. Once the user fills in the form the and the submit button has been pressed, the UPDATE statement is supposed to run and then it is supposed to navigate back to project_status.php?id=FA142. But the update is failing and the when the project_status.php is loaded back, the url looks like this http://localhost/fast/project_status.php?id= . The id is empty. It is supposed to be something like this http://localhost/fast/project_status.php?id=FA142. With the id being populated at the 

header ("location: project_status.php?id=".$_SESSION['pidForApproval']);

I suspected that my $_SESSION['pidForApproval'] is not being populated in project_status.php but I echoed back $_SESSION['pidForApproval'] in that file itself and I can see it is being populated. Hence, I suspect that the $_SESSION['pidForApproval'] is not being passed to project_status_app.php. I have already attempted to include session_start(); clause in project_status_app.php but that gives an error, stating that the session has already started, in inc_fn_header_and_menu.php. Can someone help me as to why the $_SESSION['pidForApproval'] is not being passed on to the project_status_app.php file. Thank you.

Edited August 9, 2020 by Robinson
Missing some information.

hi everyone i was wondering if anyone has any idea how i can make my php links look like this "wwwDOTmysiteDOTcom/xxx.php?s=account" right now they look like this   "wwwDOTmysiteDOTcom/account.php" thanks...

Hello everyone, I am working on a form that is similar to a shopping cart system and I am thinking of creating a button that submits the checked value and saves them to a $_SESSION variable. And also a link that links to a cart.html that takes the values of a $_SESSION variable. I am have trouble figuring what tag/attribute should I use in order to achieve that.   Right now my code attached below submits the checked values to cart.html directly. However I want my submit button to save the checked box to a $_SESSION variable and STAY on the same page. And then I will implement a <a> to link to the cart.php.   I researched a little bit about this subject and I know it's somewhat related to ajax/jquery. I just wanted to know more about it from you guys. I appreciate your attention for reading the post and Thanks!   Below is the form that I currently have:

<form name= "finalForm" method="POST" action="cart.php">
<input type="Submit" name="finalSelected"/>

<?php foreach($FinalName as $key => $item) {?>
<tr>
<td><input type="checkbox" name="fSelected[]" value="<?php echo htmlspecialchars($FinalID[$key])?>" />
<?php echo "$FinalID[$key] & $item";?>
</td>
</tr>
<?php } ;?>

Below is the code for cart.php

<?php
require ('connect_db.php');
if(isset($_POST['finalSelected']))
{
	if(!empty($_POST['fSelected']))
	{
		$chosen = $_POST['fSelected'];
		foreach ($chosen as $item)
			echo "aID selected: $item </br>";
		$delimit = implode(", ", $chosen);
		print_r($delimit);
	}

}
if(isset($delimit))
{
$cartSQL = "SELECT * from article where aID in ($delimit)";
$cartQuery = mysqli_query($dbc, $cartSQL) or die (mysqli_error($dbc));
while($row = mysqli_fetch_array($cartQuery, MYSQLI_BOTH))
{
	$aTitle[] = $row[ 'name' ];
}
}
?>

<table>
	
		<?php if(isset($delimit)) { 
		$c=0; foreach($aTitle as $item) {?>
		<tr>
		<td>
			<?php echo $aTitle[$c]; $c++;?>
		</td>
		</tr>
		<?php }}?>
</table>