PHP - Storing A $_post In A $_session Not Working

hey gang:

i have a number of variables stored in the $_SESSION array and wanted to know how i can keep them handy for use AFTER PayPal has done it's thing.  to help clarify, the desired process here is client fills out form. clicks PayPal button. form data is then used to create some documents which are then sent to client.  i have the flow working but without the PayPal part because i'm not sure how to preserve the form data while PayPal does it's thing so i can use it when PayPal is done.  am i making sense?  i'd like to steer away from client-side cookies because of security issues and our paranoid client insists on it...

bah.  first the JSON shuffle from JavaScript to PHP and now this PayPal mess. 

any help is MOST welcome.  TIA!

WR!

First let me explain my code.
It comprises of three php files.

inc_fn_header_and_menu.php,  contains the HTML and CSS header details and it initializes the session via session_start();

 

This  is later included in project_status.php] .

 

In project_status.php] , I have included another file project_status_app.php which contains a HTML form.

 project_status.php:

<?php
 include 'inc_fn_header_and_menu.php';
function includeFile($file,$variable) {
    $var = $variable;
    include($file);
}
if (isset($_GET['id']) && $_GET['id']!="") {
    $pid    = $_GET['id'];
    $_SESSION['pidForApproval'] = $_GET['id'];
    $query = 'SELECT * FROM `profile` WHERE pid ='.'\''.$pid.'\'';
    $result=mysqli_query($db,$queryToRetrievePP) or die("There are no records to display ... \n" . mysqli_error());
    foreach ($result as $row) {
        $status = $row['status'];
    }        
}
...........some PHP and HTML code.......
	<div id="customerPurchaseApprovalForm">
<?php  
  echo '<p>APPROVAL FOR CUSTOMER PURCHASE</p>';
  $discountApprovalStatus = "Granted";
  if ($discountApprovalStatus == "Granted") {  
 
  includeFile("project_status_app.php",$highestannualvalue);
  } else {
     //.........
  }

In project_status_app.php I am attempting to retrieve pidForApproval from the $_SESSION array.

<?php
        // put your code here  UPDATE `pp` SET `customer_purchase_remarks` = 'hahaha' WHERE `pp`.`id` = 207;
        
        if ($_SERVER['REQUEST_METHOD'] == 'POST') {
            include '../../inc/fastlogin.php';      
            $sql = "UPDATE pp SET customer_purchase_remarks ='{$_POST['remarkstxt']}' WHERE pp.pid='{$_SESSION['pidForApproval']}'"; 
            $result = mysqli_query ( $fastdb, $sql ) ;
            if (mysqli_affected_rows($fastdb) != 1) { 
               $_SESSION['err_cpa_rmks'] = "<p>Error while updating WHERE id='{$_SESSION['pidForApproval']}'</p>";
                //echo "<p>Error while updating WHERE id='{$_POST['pidForApproval']}'</p>".mysqli_error($fastdb);                 
            } else { 
                $_SESSION['suc_cpa_rmks'] = "<p>Records was updated successfully.</p>";
                //echo "Records was updated successfully."; 
            }
            header ("location: project_status.php?id="$_SESSION['pidForApproval']);
            exit();
        }    
        
        ?>

When I load  project_status.php,  project_status_app.php is supposed to display the form. Once the user fills in the form the and the submit button has been pressed, the UPDATE statement is supposed to run and then it is supposed to navigate back to project_status.php?id=FA142. But the update is failing and the when the project_status.php is loaded back, the url looks like this http://localhost/fast/project_status.php?id= . The id is empty. It is supposed to be something like this http://localhost/fast/project_status.php?id=FA142. With the id being populated at the 

header ("location: project_status.php?id=".$_SESSION['pidForApproval']);

I suspected that my $_SESSION['pidForApproval'] is not being populated in project_status.php but I echoed back $_SESSION['pidForApproval'] in that file itself and I can see it is being populated. Hence, I suspect that the $_SESSION['pidForApproval'] is not being passed to project_status_app.php. I have already attempted to include session_start(); clause in project_status_app.php but that gives an error, stating that the session has already started, in inc_fn_header_and_menu.php. Can someone help me as to why the $_SESSION['pidForApproval'] is not being passed on to the project_status_app.php file. Thank you.

Edited August 9, 2020 by Robinson
Missing some information.

Hello pros.
 
 
I've been working on a website, and i just figured out that a thing is completely wrong.
 
I am entering the website with: "website.com/something.php?name='Hello/system/root/advance.exe'"
but somehow the $_POST['name'] is null...
 
My current php code which just prints that post data:
Spoiler

<?php
  $postedFileName = $_POST["name"];
  echo $postedFileName; /*#--  Here it doesnt echo anything --#*/
?>

So ive created a forum that I got handling several different approvals. (it is used to approve or decline all submitted notes) it works fine and it even submits fine im at the part know where i process the information and do something with it, below is my form:


<form action="course_proccess.php?action=approve" method="post">
  <table align="left" border="1" cellspacing="0" cellpadding="3">
    <tr>
      <td><b>Author</b></td>
      <td><b>File name</b></td>
      <td><b>Download</b></td>
      <td><b>Suggested catagory</b></td>
      <td><b>Select Catagory</b></td>
      <td>Approve</td>
    </tr>
    
      <td><input type="text " disabled="disabled" name="tr1_author" value="MikeH" </td>
      <td><input typee="text " disabled="disabled" name="tr1_name" value="A lot of my skills set back"</td>
      <td><a href= /uzEr%20Upl0ds/cache.zip > Download</a></td>
      <td>1001 Laws - Polceing </td>
      <td><select name="tr1_scatagory">
          <option value="1"> Intro To Law </option>
          <option value="2"> 1001 Laws - Police Foundations </option>
        </select></td>
      <td><select name = "tr1_approve">
          <option value = "1"> Yes</option>
          <option value = "2"> no</option>
        </select></td>
    </tr>
      <td><input type="text " disabled="disabled" name="tr2_author" value="MikeH" </td>
      <td><input typee="text " disabled="disabled" name="tr2_name" value="MM"</td>
      <td><a href= /uzEr%20Upl0ds/Michael Heintzman.doc > Download</a></td>
      <td>1001 Laws - Polceing </td>
      <td><select name="tr2_scatagory">
          <option value="1"> Intro To Law </option>
          <option value="2"> 1001 Laws - Police Foundations </option>
        </select></td>
      <td><select name = "tr2_approve">
          <option value = "1"> Yes</option>
          <option value = "2"> no</option>
        </select></td>
    </tr>
    <input type="hidden" name="rowCount" value="2">
    <tr>
      <td><input type="submit" name="sendData" value="send"/></td>
    </tr>
  </table>
</form>



so what I do in my process file is I have a for loop for all of the "TR's" in the table and if it is approved I have an if statment and then I want to add db stuff my problem is my $_POST's are returning blank and I have no idea why. Can someone please assit me with this? (p.s i have debugged and it does get into the if approve == 1 statment.

if(isset($_GET['action'])){

if ($_GET['action'] == "approve"){

if(isset($_POST['sendData']))
{

$dataArray = array();

$row_count = $_POST['rowCount'];
for($i=1;$i<$row_count;$i++)
{

$approven = "tr".$i."_approve";
$approve = $_POST[$approven];

if($approve == 1)
{
//Move the info over to "approved files" and delete it out of newnotes
$author = "tr".$i."_author";
$location = "tr".$i."_location";
$catagory ="tr".$i."_scatagory";
$filename = "tr".$i."_name";
$submitedby = $_POST['author'];
die($submitedby);

$dataArray[]=array('author'=>$author,'fileName'=>$fileName,'Catagory'=>$catagory,'location'=>$location);
var_dump($dataArray);

}else{
//Email user saying they did not recive credits AND delete the entry

}
}

if(!empty($dataArray))
{
//now do what you want with the dataArray...
var_dumb($dataArray);
}
}

}

I have a simple log in form. By debugging I found that isset post submit function is not responding. It remains on the same page after submitting form. I have googled all the possible solutions to this problem but none worked. Any help is greatly appreciated. The form is in multiplelogin.php  file and the code is in multi.php file. After login redirection is to teachers.php file.

<?php

session_start();

$conn = mysqli_connect("localhost", "root",  "", "signup");

if(isset($_SESSION['username'])) {
    
    header('location: teachers.php');

    exit();
     
}

?>

<!DOCTYPE html>

<head>

  <link rel="stylesheet" type="text/css" href="bootstrap.css">

  <title> Teachers Students Login </title>

</head>

<body class="bg-secondary">

    <div class="container">

        <div class="row justify-content-center">

            <div class="col-log-5 bg-light mt-5 px-0">

                <h3 class="text-center text-light bg-primary py-3 px-5"> Log In </h3>

                <?php
            
                if(isset($_GET['error'])) {
                
                    if ($_GET['error'] == 'invalidemail') {
                    
                        echo "<p class='alert'> Invalid Email Id! </p>";
                    
                    } else if ($_GET['error'] == 'wrongpassword') {
                    
                        echo "<p class='alert'> Incorrect Password! </p>";
                    
                    } 
                 
                }
            
                ?>

                <form action="multi.php" action="post" class="py-4 px-5" id="form">

                    <div class="form-group px-5">

                        <input type="email" name="email" class="form-control form-control-lg" placeholder="Email" required>

                    </div>

                    <div class="form-group px-5">

                        <input type="password" name="password" class="form-control form-control-lg" placeholder="Password" required>

                    </div>

                    <div class="form-group px-5">

                        <input type="submit" name="submit" value="Submit" class="btn btn-primary btn-block">

                    </div>

                </form>

            </div>

        </div>

    </div>

</body>

</html>

 

<?php

 ini_set( 'display_errors', 1 ); 
 error_reporting( E_ALL );

 if (isset($_POST['submit'])) {
     
    $conn = mysqli_connect("localhost", "root",  "", "signup");
     
     $email = $_POST['email'];

     $password = $_POST['password'];
     
     $sql = "SELECT * FROM teachersRegist WHERE email=?";

     $stmt = mysqli_stmt_init($conn);
     
     if (!mysqli_stmt_prepare($stmt, $sql)) {

         header("Location: multilogin.php?error=sqlerror");

         exit();

     } else {
         
         mysqli_stmt_bind_param($stmt, "s", $email);

         mysqli_stmt_execute($stmt);

         $result = mysqli_stmt_get_result($stmt);
         
         if ($row = mysqli_fetch_assoc($result)) {
             
             $pwdCheck = password_verify($password, $row['password']);

             if ($pwdCheck == false) {
                 
                 header("Location: multilogin.php?error=wrongpassword");

                 exit();
                 
             } else if ($pwdCheck == true) {
                 
                 session_start();

                 $_SESSION['username'] = $row['username'];

                 $_SESSION['email'] = $row['email'];

                 header("Location: teachers.php?login=success");

                 exit ();
                 
                 
             } else {
                 
                  header("Location: multilogin.php?error=wrongpassword");

                 exit();
                 
             }
             
         } 
         
        else {
             
        header("Location: multilogin.php?error=invalidemail");

        exit();
             
             
         }
         
        }
     
    } 

    else {
     
    header("Location: multilogin.php");

    exit();
          
} 
     
?>
 

Edited September 9, 2020 by tarunrathore

Code: [Select]
 
  <?php
    $query = "Select * from users where username = '$user' ";
    $result = mysql_query($query) or die(mysql_error());
    $row = mysql_fetch_array($result);

    $test = $_POST['test1'];
    $ques = "Select * from questions where testname = '$test' ";
    $qres = mysql_query($ques) or die(mysql_error());
    $qdetails = mysql_fetch_array($qres);
    $id = $qdetails['id'];
    $testname = $qdetails['testname'];
    $ans = "Select * from answers where qid = $id";
    $ares = mysql_query($ans) or die(mysql_error());
    if($qdetails) {
    ?>
    <div class="padding">

    <form name="answerform" action="answer.php" method="POST">
    <h3>&nbsp;</h3>
    <input name="test2" id="test2"  type="text" value="<?php echo $qdetails['testname'];?>"      /><h3><?php echo $qdetails['text'];?></h3>
     <input name="test3" id="test3"  type="text" value="<?php echo      $qdetails['testseries'];?>" /><h3><?php echo $qdetails['text'];?></h3>
    <br />
    <br />
    <br />
    <?php while($opdetails = mysql_fetch_assoc($ares)) { ?>
    <input class="text" id="opt2" name="correctans" type="radio" value="<?php echo $opdetails['text']; ?>" /><br /><?php echo $opdetails['text']; ?>  <?php }?>
    <div class="two-fields clearfix".
    <p class="confirm">&nbsp;</p>
    </div>
    <input type="submit" value="SUBMIT ANSWER" />
    </form>
    </div>
    </div>
    </div>
 <?php }

this is the code for the program where i am creating the fields i want to fetch the data from the input fields with the name test 2 and test 3 in answer.php

Code: [Select]
    $query = "Select score from users where username = '$user' ";
    $result = mysql_query($query) or die(mysql_error());
    $row = mysql_fetch_array($result);
    $user_score = $row['score'];

    print_r($_REQUEST);
    $tester = $_POST['test3'];
    $test = $_POST['test2'];
    print_r($_POST);
    var_dump($_POST);
    $ques = "Select * from questions where testname = '$test' And testseries = '$tester' ";
    $result = mysql_query($ques) or die(mysql_error());
    $row = mysql_fetch_array($result);
    $qid = $row['id'];
    $score = $row['score'];
    if(isset($_POST['correctans']))
    {
    $answer = $_POST['correctans'];
    }
    else
    {
    $answer = '';
    }
    $fetch_ans = "Select * from answers where correct = 1 AND qid = $qid";
    $result = mysql_query($fetch_ans) or die(mysql_error());
    $row = mysql_fetch_array($result);
    $id = $row['id'];
    $correctans = $row['text'];

    if('$correctans' == '$answer')
    {
    $user_score += $score;
    $qid++;
    $query = "Update users set score = $user_score  where username = '$user'";
    $res = mysql_query($query) or die(mysql_error());
    if($res) {
 
header("Location: answer.php"); 
    }
    }else
    {
header("Location: answer.php");
    }


    ?>
THIS IS answer.php and here i try to post information from test2 and test3 fields  but i am not getting any output
the output shows blank array()
and unidentified index test2
and unidentified index test3
i am not able to figure out the error
any help will be highly appreciated
and forgive me if i have made any mistakes in posting the question since i am a newbie at PHPFREAKS

Hello everyone, I am working on a form that is similar to a shopping cart system and I am thinking of creating a button that submits the checked value and saves them to a $_SESSION variable. And also a link that links to a cart.html that takes the values of a $_SESSION variable. I am have trouble figuring what tag/attribute should I use in order to achieve that.   Right now my code attached below submits the checked values to cart.html directly. However I want my submit button to save the checked box to a $_SESSION variable and STAY on the same page. And then I will implement a <a> to link to the cart.php.   I researched a little bit about this subject and I know it's somewhat related to ajax/jquery. I just wanted to know more about it from you guys. I appreciate your attention for reading the post and Thanks!   Below is the form that I currently have:

<form name= "finalForm" method="POST" action="cart.php">
<input type="Submit" name="finalSelected"/>

<?php foreach($FinalName as $key => $item) {?>
<tr>
<td><input type="checkbox" name="fSelected[]" value="<?php echo htmlspecialchars($FinalID[$key])?>" />
<?php echo "$FinalID[$key] & $item";?>
</td>
</tr>
<?php } ;?>

Below is the code for cart.php

<?php
require ('connect_db.php');
if(isset($_POST['finalSelected']))
{
	if(!empty($_POST['fSelected']))
	{
		$chosen = $_POST['fSelected'];
		foreach ($chosen as $item)
			echo "aID selected: $item </br>";
		$delimit = implode(", ", $chosen);
		print_r($delimit);
	}

}
if(isset($delimit))
{
$cartSQL = "SELECT * from article where aID in ($delimit)";
$cartQuery = mysqli_query($dbc, $cartSQL) or die (mysqli_error($dbc));
while($row = mysqli_fetch_array($cartQuery, MYSQLI_BOTH))
{
	$aTitle[] = $row[ 'name' ];
}
}
?>

<table>
	
		<?php if(isset($delimit)) { 
		$c=0; foreach($aTitle as $item) {?>
		<tr>
		<td>
			<?php echo $aTitle[$c]; $c++;?>
		</td>
		</tr>
		<?php }}?>
</table>

edited

For the last few hours I have been pulling my hair out on a session not storing when I moved from local host to my vps.

I have been setting sessions like:


$_SESSION['mydata'] = $variable;


This works no problem on my wamp installation.

However to get it to work on my vps, I have to store them like this


$_SESSION[mydata] = $variable;


Can someone please explain to me why this is the case?

PHP 5.3.3

I am trying to redirect a user (currently logged in) to a page where they are able to edit a posted comment.

To keep things secure I am using a forms hidden input value to pass the {postID} to a redirect page

Code: [Select]
<form name="post_edit" method="post" action="post-edit-redirect.php" >
<input type="hidden" name="local" id="local" value="<?php echo $row_rsPosts['postID']; ?>" />
<input type="image" src="../imgs/managepost.png" name="submit" />
</form>

On the redirect page (simplified below) I am setting the {postID} in a SESSION before redirecting to the user to the page to edit their post with the new $_SESSION val for {postID} set.

Code: [Select]
session_start();
$id = $_REQUEST['local'];
$_SESSION['postID']=$id;
header("Location: edit-post.php");

This is working fine in every browser except IE (some one please just put an end to it), where when the edit-post.php page is reached the $_SESSION['postID'] is empty.  If I regenerate the session ID from the redirect page as below IE then sets the SESSION ok.

Code: [Select]
session_start();
session_regenerate_id();
$id = $_REQUEST['local'];
$_SESSION['postID']=$id;
header("Location: edit-post.php");

However there should be no need to do this and would rather not if there is no need.

Any help on why IE is not setting the SESSION is appreciated, and I hope I am not covering old ground here however I am unable to find a solution anywhere. - Cheers

The $_Session has a url variable. Using a Dom how do I properly do:

Code: [Select]
html->load($_SESSION['variable'])

I was thinking about breaking down the session to retrieve the value inside but I don't know how.


 

Hey, i was reading some code and i find this:

if(stristr($_SESSION["s"]["user"]["asdasd"]),$someString)


How the double/triple [] in $_SESSION works ?

PS: I tryied to google it but it was kinda hard to search :X

Thanks.

Hi i have made a login in system for a website iam trying to make. after you log  in im trying to display the members username via the $_session created in the check_login.php. but when i Echo or print_r the $_session all is get is  "welcome  array" its like its not passing any information via the $_session from page to page. here is my code thanks in advance.


Check_login.php
session_start();

// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=md5($_POST["mypassword"]);

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
$_SESSION["myusername"]==$myusername;
$_SESSION["mypassword"];

header("location:login_success.php");
}
else {
echo "Wrong Username or Password";
}

?>

login_success.php

<?
session_start();
if($_SESSION['myusername']="$myusername"){
header("location:main_login.php");
}

Echo "welcome" . $_SESSION['$myusername'];

?>

thanks

Hi i'm new to the forum and i'm wondering if anyone here could help me out with the problem i'm having. the script i have uses $_SESSION['userid'] = $users['id']; and i'm not exactly sure how to read that .. any information would be helpful. thanks in advance

Hiya, I'm quite new to php.
My script was working fine till I transferred to a new host. The login system doesn't seem to register the $_SESSION 'userid' variable, so the proper page won't load because it thinks I'm not logged in.
login.php - processes the login information
Code: [Select]
<?php
session_start();
include('functions.php');
connect();
// note: session_start needs to be on every document apart 
// from index.php, login.php and register.php

$username = protect($_POST['username']);
$password = protect($_POST['password']);
// the password and username from the inputs are stored in variables

if ($username&&$password) {
// if both the username and password variables are true
$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$numrow = mysql_num_rows($query); 

if ($numrow!=0) {
// if $numrow does not equal nothing
while ($row = mysql_fetch_assoc($query)) {
$userid = $row['userid'];
$dbusername = $row['username'];
$dbpassword = $row['password'];
}
if ($username==$dbusername&&md5($password)==$dbpassword) {
// $password gets encrypted so it can be checked on the database password
$_SESSION['username'] = $username;
$_SESSION['userid'] = $userid;
// used for sessions knowing who is logged in
header("Location:main.php");
// redirects to main.php page after successful login
} else {
echo "Incorrect password";
}
} else {

?>
<html>
<head>
<title>University Crusade</title>
<link rel="stylesheet" href="css/style.css" type="text/css" media="screen">
<meta name="viewport" content="width=device-width, minimum-scale=1,maximum-scale=1, user-scalable=no">
</head>
<body>
<div id="wrapper">
<?php
die ("

That account doesn't exist...<br /><a href=\"index.php\">try again,</a>
&nbsp;<a href=\"register.php\">or register an account.</a>
");
}
} else {
die("Please enter a username and password");
}
?>
</div>
<div id="footer">

</div>
</body>
</html>

and the main.php - after login.php it takes the user here
Code: [Select]
<?php 
session_start();
include('functions.php');
connect();
?>
<html>
<head>
<title>University Crusade</title>
<link rel="stylesheet" href="css/new.css" type="text/css" media="screen">
<meta name="viewport" content="width=device-width, minimum-scale=1,maximum-scale=1, user-scalable=no">
</head>
<body>
<?php
if (isset($_SESSION['userid'])) {
include('safe.php');
?>
<ul id="tab-nav">
<li><a href="stats.php" id="tab-character">CHARACTER</a></li>
<li><a href="games.php" id="tab-games">GAMES</a></li>
<li><a href="account.php" id="tab-account">ACCOUNT</a></li>
</ul>
<div id="wrapper">
<h2 id="name">Hello,&nbsp;<?php echo $_SESSION['username'] ?>!</h2>
<p>
Welcome to UNIVERSITY CRUSADE the fantasy-themed pervasive web game!
</p>
<p>
To start playing, begin with clicking the "games" button at the top of
the screen, from there choose a challenge and follow the instructions
</p>
<p>
What are the other buttons for? Well, the "account" button (top-right)
is where you can change settings for your account - things like changing
your password, deleting your account etc. The "character" button (top-left)
when clicked takes you to your character, you can change your display picture,
view your statistics and battle other players.
</p>
<p>
More help with the game is available in the "account" section, this includes
a detailed game manual describing in-detail game concepts and information.
</p>
</div>
<div id="footer">
<a href="logout.php" class="button">log me out</a>
</div>
<?php
} else {
die ("
<div id=\"wrapper\">
<p>Opps! You don't seem to be logged in...</p>
<a class=\"button\" href=\"index.php\">login now</a><br />
<p>Don't have an account? No worries, just <a href=\"register.php\">register for one.</a></p>
</div>
");
}
?>
</body>
</html>
I appreciate any help, as I'm left scratching my head.