PHP - Need To Store A Database Variable In A Php Variable

It seems that in the following script I am not able to make $page contain some values as it always acts as it contains 0.
The script will give you more idea about what I wanna do with it.
Code: [Select]
<?php
include('dbinfo.inc');
session_start();
$connect= mysql_connect($host,$dbuser,$password) or die("connect to database fails");
mysql_select_db($dbname, $connect);
//This will set the number of messages we want to display on each page
$rows_per_page = 5;
function show_msg()
{
echo "<tr align='center'>
<td>$row[message]</td>
</tr>
<tr><td><strong>Sent By: $_SESSION[username] ON Date: $row[date]</strong></td></tr>
<tr><td></td></tr>";
}
//This will set the necessay variables required to set the page layout
function page_vars()
{
$sql = "select * from msgs";
$result = mysql_query($sql, $connect);
$numrows = mysql_num_rows($result);
$total_pages = ceil($numrows/$rows_per_page);
//Check whether page is given or not
if(isset($_GET["page"]))
{
$page = $_GET["page"];
}
else
{
$page = 1;
}
if($page < 1):
{
$page = 1;
}
elseif($page > $total_pages):
{
$page = $total_pages;
}
endif;
}
if($_SESSION[loggedin] == TRUE && $_SESSION[actype] == lecturer)
{
echo "<form action='postmsg.php' method='POST'>";
echo "<table width='80%' border='1'><tr align='center'><td><strong>To send a new message type it in the below box and press SUBMIT</strong>
</td></tr>";
echo "<tr align='center'>
<td><textarea name='msgarea' cols='40' row='5'></textarea></td>
</tr>
<tr align='center'>
<td><input type='submit' value='Send Message' /></td>
</tr>
</table>";
$limit .= 'LIMIT '.($page - 1)*$rows_per_page.', '.$rows_per_page;
echo $limit;
$sql = "select * from 'msgs' $limit";
$result = mysql_query($sql);
echo "<table width='80%' border='1'>";
$row = mysql_fetch_assoc($result);
while($row)
{
show_msg();
}
}
else
{
page_vars();
$limit .= 'LIMIT '.($page - 1)*$rows_per_page.', '.$rows_per_page;
$sql = "select * from msgs $limit";
$result = mysql_query($sql,$connect);
echo "<table width='80%' border='1'>";
while($row = mysql_fetch_assoc($result))
{
show_msg();
}
echo "<tr align='center'>
<td>
<a href='$_SERVER[php_self]?page=1'>First Page</a>
<a href='$_SERVER[php_self]?page=($page - 1)'>$page</a>
<a href='$_SERVER[php_self]?page=$page'>$page</a>
<a href='$_SERVER[php_self]?page=($page + 1)'>$page</a>
<a href='$_SERVER[php_self]?page=($total_pages)'>>>>Last Page</a>
</td>
</tr>";
echo "</table>";
}
?>
now when i echo $limit it always shows "-5, 5" , that's not what i want from this script.
Instead I want limit to store "0, 1" with the same concept not direct because it will change according to what $_GET[page] holds.

Hope I will get the solution here....

hello, um i got a form that stored an array of variables upon users clicks.
it submits to another page fine as an array and i can print them using

if(!empty($_POST['langSpoken'])) {

    echo "\n<p><strong>You selected the following LangSpoken:</strong></p>\n<ul>";

    foreach($langSpoken as $lang) {

      // exclude any items with chars we don't want, just in case someone is playing
      if(!preg_match('/^[-A-Z0-9\., ]+$/iD', $lang)) continue;

      // print the lang
      echo "\n\t<li>" . htmlspecialchars($lang) . "</li>";
    }
    echo "\n</ul>";

  } 
  else {
    echo "\n<p>No items selected</p>";
  }

it prints a list a of array like
english spanish
but i need to store each one in one variable so i can store in a database
is there a way?
thanks

Currently I am adding the concept of "entitlements" to my website.

In the past, my "article.php" script would simply look to the URL for which article was being requested and then load it.  However now that I am also adding the concept of "premium content" for "paid members", I need a way to control who sees what.

What I am wondering is - from a security standpoint - how much information I should load into the $_SESSION variable.

For instance, right now when a user logs in, I think I just store the "memberID" and "FirstName" and possibly "Username".

It would be more efficient when a Member logs in to also retrieve their "Membership Plan" and store that in the $_SESSION variable, so that as they browse my website, each page can simply grab $_SESSION['MembershipPlan'] and run that through a function that I need to build and then determine if the user gets to access said page.

However, maybe it would be more secure to have it so when a user lands on page XYZ, I would look at their "memberID" and query the database to get their "MembershipPlan"?

Any thoughts on each approach?

Again, my main concern is *security*, but I also suppose this plays into "performance".

 

 

    //multi query
    $sql= "SELECT option_value FROM settings WHERE option_name = 'email_temp_issue';";  //1
    $sql .="SELECT title FROM books WHERE id = '$bookid';";  //2
    $sql .="SELECT fullName from students WHERE email = '$username'";  //3
    $sql_run = mysqli_multi_query($connection,$sql);
    if(mysqli_num_rows($sql_run)>0)
    {
        foreach ($sql_run as $row)
        {
            $email_template = $row['option_value']; //retrieve from query 1
            $title = $row['title']; //retrieve from query 2
            $name = $row['fullName']; //retrieve from query 3
        }
    }

I am trying to store the data from the multi query into each variable, which I am not sure how to do..Anyone can help? :)

the same page?