PHP - Logout Script Not Clearing $_session Variables

I based this off some other pages read, and think I'm doing this wrong or it's just not connecting. 

Code: [Select]
Here's the database table:
CREATE TABLE users (
    id INT NOT NULL AUTO_INCREMENT,
    username VARCHAR(30) NOT NULL UNIQUE,
    password VARCHAR(64) NOT NULL,
    salt VARCHAR(3) NOT NULL,
    PRIMARY KEY(id)
);


Ando far I have index.php with my login form <form name="login" action="login.php" method="post">
    Username: <input type="text" name="username" />
    Password: <input type="password" name="password" />
    <input type="submit" value="Login" />
</form><br />Would you like to <a href="register.php">register?</a></center>

Then I have my actual login on login.php (header.php includes website's main image as well as session_start():
<?php

include('header.php');

$username = $_POST['username'];
$password = $_POST['password'];
//connect to the database here
$username = mysql_real_escape_string($username);
$query = "SELECT password, salt
        FROM users
        WHERE username = '$username';";
$result = mysql_query($query);
if(mysql_num_rows($result) < 1) //no such user exists
{
    header('Location: login.php');
    die();
}
$userData = mysql_fetch_array($result, MYSQL_ASSOC);
$hash = hash('sha256', $userData['salt'] . hash('sha256', $password) );
if($hash != $userData['password']) //incorrect password
{
    header('Location: login_form.php');
    die();
}
else
{
    validateUser(); //sets the session data for this user
}
//redirect to another page or display "login success" message
?>

then I have my register php on register.php:
<?php

include('header.php');

//retrieve our data from POST
$username = $_POST['username'];
$pass1 = $_POST['pass1'];
$pass2 = $_POST['pass2'];
if($pass1 != $pass2)
    header('Location: register_form.php');
if(strlen($username) > 30)
    header('Location: register_form.php');
    
    $hash = hash('sha256', $pass1);
    function createSalt()
{
    $string = md5(uniqid(rand(), true));
    return substr($string, 0, 3);
}
$salt = createSalt();
$hash = hash('sha256', $salt . $hash);

$dbhost = 'localhost';
$dbname = 'mygame';
$dbuser = 'root';
$dbpass = '';
$conn = mysql_connect($dbhost, $dbuser, $dbpass);
mysql_select_db($dbname, $conn);
//sanitize username
$username = mysql_real_escape_string($username);
$query = "INSERT INTO users ( username, password, salt )
        VALUES ( '$username' , '$hash' , '$salt' );";
mysql_query($query);
mysql_close();
header('Location: login.php');

?>
and lastly the register form:
   
    <center><form name="register" action="register.php" method="post">
    Username: <input type="text" name="username" maxlength="30" />
    Password: <input type="password" name="pass1" />
    Password Again: <input type="password" name="pass2" />
    <input type="submit" value="Register" />
</form></center>
I am getting the errors:
Warning: mysql_num_rows() expects parameter 1 to be resource, boolean given in /Applications/XAMPP/xamppfiles/htdocs/testing/login.php on line 13

Warning: Cannot modify header information - headers already sent by (output started at /Applications/XAMPP/xamppfiles/htdocs/testing/config.php:1) in /Applications/XAMPP/xamppfiles/htdocs/testing/login.php on line 15

Could someone explain why this is happening?

I am following along in a PHP, MySQL book and the way they clear session variables is by:

Code: [Select]
session_start();
session_unset();
session_destroy();

They clear session variables like that in that exact order.

My question is that this apparently clears ALL session variables for the browser in use. Every website I have visited when you click a LOGOUT button ONLY logs you out of their specific site and DOES NOT seem to clear ALL session variables as this would log you out of any other websites that you might be logged into with that same browser.

So, I went to the PHP website and found out that instead of using the session_unset () function you can clear individual session variables using the unset ($_SESSION['varname']) function.

Is this a good way of clearing session variables ONLY for a PARTICULAR website and NOT clearing session variables for the WHOLE browser? If so, would I then NOT use the session_destroy () function after clearing each individual session variable specific to that ONE website using unset ($_SESSION['varname'])?

Thank you in advance! 

When a user logs into my site I was to store the user_name, user_role, and user_id in a session variable, then store this in a regular variable to make querying easier, but I am having issues with my code as its causing issues with my queries.

Code: [Select]

if (mysqli_num_rows($data) > 0) {
  //set sessions
    $row = mysqli_fetch_array($data);
    $_SESSION['username'] = $row['username'];
    $_SESSION['user_role'] = $row['role'];
    $_SESSION['user_id'] = $row['user_id'];
         
           
  //set variables
    $username = $_SESSION['username'];
    $user_role = $_SESSION['user_role'];
    $user_id = $_SESSION['user_id'];

}


Any ideas whats wrong?!
Thanks for the help!!

First let me explain my code.
It comprises of three php files.

inc_fn_header_and_menu.php,  contains the HTML and CSS header details and it initializes the session via session_start();

 

This  is later included in project_status.php] .

 

In project_status.php] , I have included another file project_status_app.php which contains a HTML form.

 project_status.php:

<?php
 include 'inc_fn_header_and_menu.php';
function includeFile($file,$variable) {
    $var = $variable;
    include($file);
}
if (isset($_GET['id']) && $_GET['id']!="") {
    $pid    = $_GET['id'];
    $_SESSION['pidForApproval'] = $_GET['id'];
    $query = 'SELECT * FROM `profile` WHERE pid ='.'\''.$pid.'\'';
    $result=mysqli_query($db,$queryToRetrievePP) or die("There are no records to display ... \n" . mysqli_error());
    foreach ($result as $row) {
        $status = $row['status'];
    }        
}
...........some PHP and HTML code.......
	<div id="customerPurchaseApprovalForm">
<?php  
  echo '<p>APPROVAL FOR CUSTOMER PURCHASE</p>';
  $discountApprovalStatus = "Granted";
  if ($discountApprovalStatus == "Granted") {  
 
  includeFile("project_status_app.php",$highestannualvalue);
  } else {
     //.........
  }

In project_status_app.php I am attempting to retrieve pidForApproval from the $_SESSION array.

<?php
        // put your code here  UPDATE `pp` SET `customer_purchase_remarks` = 'hahaha' WHERE `pp`.`id` = 207;
        
        if ($_SERVER['REQUEST_METHOD'] == 'POST') {
            include '../../inc/fastlogin.php';      
            $sql = "UPDATE pp SET customer_purchase_remarks ='{$_POST['remarkstxt']}' WHERE pp.pid='{$_SESSION['pidForApproval']}'"; 
            $result = mysqli_query ( $fastdb, $sql ) ;
            if (mysqli_affected_rows($fastdb) != 1) { 
               $_SESSION['err_cpa_rmks'] = "<p>Error while updating WHERE id='{$_SESSION['pidForApproval']}'</p>";
                //echo "<p>Error while updating WHERE id='{$_POST['pidForApproval']}'</p>".mysqli_error($fastdb);                 
            } else { 
                $_SESSION['suc_cpa_rmks'] = "<p>Records was updated successfully.</p>";
                //echo "Records was updated successfully."; 
            }
            header ("location: project_status.php?id="$_SESSION['pidForApproval']);
            exit();
        }    
        
        ?>

When I load  project_status.php,  project_status_app.php is supposed to display the form. Once the user fills in the form the and the submit button has been pressed, the UPDATE statement is supposed to run and then it is supposed to navigate back to project_status.php?id=FA142. But the update is failing and the when the project_status.php is loaded back, the url looks like this http://localhost/fast/project_status.php?id= . The id is empty. It is supposed to be something like this http://localhost/fast/project_status.php?id=FA142. With the id being populated at the 

header ("location: project_status.php?id=".$_SESSION['pidForApproval']);

I suspected that my $_SESSION['pidForApproval'] is not being populated in project_status.php but I echoed back $_SESSION['pidForApproval'] in that file itself and I can see it is being populated. Hence, I suspect that the $_SESSION['pidForApproval'] is not being passed to project_status_app.php. I have already attempted to include session_start(); clause in project_status_app.php but that gives an error, stating that the session has already started, in inc_fn_header_and_menu.php. Can someone help me as to why the $_SESSION['pidForApproval'] is not being passed on to the project_status_app.php file. Thank you.

Edited August 9, 2020 by Robinson
Missing some information.

Hello everyone, I am working on a form that is similar to a shopping cart system and I am thinking of creating a button that submits the checked value and saves them to a $_SESSION variable. And also a link that links to a cart.html that takes the values of a $_SESSION variable. I am have trouble figuring what tag/attribute should I use in order to achieve that.   Right now my code attached below submits the checked values to cart.html directly. However I want my submit button to save the checked box to a $_SESSION variable and STAY on the same page. And then I will implement a <a> to link to the cart.php.   I researched a little bit about this subject and I know it's somewhat related to ajax/jquery. I just wanted to know more about it from you guys. I appreciate your attention for reading the post and Thanks!   Below is the form that I currently have:

<form name= "finalForm" method="POST" action="cart.php">
<input type="Submit" name="finalSelected"/>

<?php foreach($FinalName as $key => $item) {?>
<tr>
<td><input type="checkbox" name="fSelected[]" value="<?php echo htmlspecialchars($FinalID[$key])?>" />
<?php echo "$FinalID[$key] & $item";?>
</td>
</tr>
<?php } ;?>

Below is the code for cart.php

<?php
require ('connect_db.php');
if(isset($_POST['finalSelected']))
{
	if(!empty($_POST['fSelected']))
	{
		$chosen = $_POST['fSelected'];
		foreach ($chosen as $item)
			echo "aID selected: $item </br>";
		$delimit = implode(", ", $chosen);
		print_r($delimit);
	}

}
if(isset($delimit))
{
$cartSQL = "SELECT * from article where aID in ($delimit)";
$cartQuery = mysqli_query($dbc, $cartSQL) or die (mysqli_error($dbc));
while($row = mysqli_fetch_array($cartQuery, MYSQLI_BOTH))
{
	$aTitle[] = $row[ 'name' ];
}
}
?>

<table>
	
		<?php if(isset($delimit)) { 
		$c=0; foreach($aTitle as $item) {?>
		<tr>
		<td>
			<?php echo $aTitle[$c]; $c++;?>
		</td>
		</tr>
		<?php }}?>
</table>

Here are the project of files: So the problem I'm running into is, while php ---> php is fine (it's recovering all of my variables, I've tested with echo), the problem seems to be where I have made a command  ./createlisting.sh $itemno $title $header $description $image It reads in $itemno, $title, $header $description just fine, but it fails when I try to send an image. Again I've echoed it out and my $image variable contains the correct image name. When it gets sent to the bash script and the bash script sends it to a "log.txt" it only shows $1 thru $4, excluding the $5. When I try to use the img src to create the image on the page, the outputting echo on the page is   <img src ="/images/" /> Which of course is going to result in nothing.

What advice can you guys offer me?

Thanks!

createPage.php:

<html>
<body>
<form enctype="multipart/form-data" action="submitForm.php" method="post">
Item#: <input type="text" name="itemno" value="1" /><br />
Title: <input type="text" name="title" value="My Listing" /><br />
Header: <input type="text" name="header" value="ENTER YOUR LISTING" /><br />
<textarea name="description" cols="60" rows="20">
You will have to use quotes on anything that has more than one word. Sorry!
</textarea><br><br /></p>
<input type="hidden" name="MAX_FILE_SIZE" value="100000" />
Choose an image to upload: <input name="uploadedfile" type="file" /><br />
<input type="submit" value="Submit" />
</form>
</body>
</html>



submitForm.php:
<?php
$itemno =  $_POST["itemno"];
$title =  $_POST["title"];
$header = $_POST["header"];
$description = $_POST["description"];
// Where the file is going to be placed
$target_path = "/home/images/";

/* Add the original filename to our target path. 
Result is "uploads/filename.extension" */
$target_path = $target_path . basename( $_FILES['uploadedfile']['name']);
$image =  basename( $_FILES['uploadedfile']['name']);
if(move_uploaded_file($_FILES['uploadedfile']['tmp_name'], $target_path)) {
    echo "The file ".  basename( $_FILES['uploadedfile']['name']).
    " has been uploaded";
} else{
    echo "There was an error uploading the file, please try again!";
}
$command = "." . "/" . "createlisting.sh";
$param = $itemno . " " . $title . " " . $header . " " . $description;
$finalimage = $image . "";
$final = $command . " " . $param . " " . $finalimage;
passthru($final);

createlisting.sh:

#!/bin/bash

#Create the page based on the information
   cd logs     
   echo $1 > log.txt
   echo $2 >> log.txt
   echo $3 >> log.txt
   echo $4 >> log.txt
        echo $5 >> log.txt
   cd ..
   ./createNewDir.sh $(date +%m%d%Y)
   cd ..
   cd listings
   cd $(date +%m%d%Y)
   mkdir $1
   cd $1
   echo "<HTML>" > listing.html
   echo "<Head>" >> listing.html
   echo "<Title>" >> listing.html
   echo "$2" >> listing.html
   echo "</title>" >> listing.html
   echo "</head>" >> listing.html
   echo "<body>" >> listing.html
   echo "<h1>$3</h1><br>" >> listing.html
        echo "<img src=\"/images/$5\" />"
   echo "$4" >> listing.html
   echo "</body>" >> listing.html
   echo "</html>" >> listing.html
   cd ..
   cd ..
   cd ..
   cd scripts
        echo $(date +%d%m%Y);

Hello! I found this code from github. https://github.com/gburtini/Learning-Library-for-PHP and I want to know if its possible to add variables to it and what changes needed to be done to the whole script.
My first guess is the variables are 

$xs

and 

$ys

I want replace them and add two more. The whole code is he

<?php 

    require_once 'function.php';

    function ll_nn_predict($xs, $ys, $row, $k) {
        $distances = ll_nearestNeighbors($xs, $row);
        $distances = array_slice($distances, 0, $k);

        $predictions = array();
        foreach($distances as $neighbor=>$distance) {
            $predictions[$ys[$neighbor]]++;
        }
        asort($predictions);

        return $predictions;
    }

    function ll_nearestNeighbors($xs, $row) {
        $testPoint = $xs[$row];

        $distances = _ll_distances_to_point($xs, $testPoint);
        return $distances;
    }

    function _ll_distances_to_point($xs, $x) {
        $distances = array();
        foreach($xs as $index=>$xi) {
            $distances[$index] = ll_euclidean_distance($xi, $x);
        }
        asort($distances);
        array_shift($distances);
        return $distances;
    }

and the function.php that is required is this:

<?php

    function ll_transpose($rows) {
        $columns = array();
        for($i=0;$i<count($rows);$i++) {
            for($k = 0; $k<count($rows[$i]); $k++) {
                $columns[$k][$i] = $rows[$i][$k];
            }
        }
        return $columns;
    }

    function ll_mean($array) {
        return array_sum($array)/($array);
    }

    function ll_variance($array) {
        $mean = ll_mean($array);

        $sum_difference = 0;
        $n = count($array);

        for($i=0; $i<$n; $i++) {
            $sum_difference += pow(($array[$i] - $mean),2);
        }

        $variance = $sum_difference / $n;
        return $variance;
    }
 
    function ll_euclidean_distance($a, $b) {
        if(count($a) != count($b))
            return false;
        
        $distance = 0;
        for($i=0;$i<count($a);$i++) {
            $distance += pow($a[$i] - $b[$i], 2);
        }

        return sqrt($distance);
    }

 

I just want to know where is the variables in those 2 scripts and add more as I'm not well versed in using PHP. Thank you!

I have made a script that reads values from MySQL database and "Echo" them.  When I run the script the variables from the DB are printed on the page as they should be. 

Now I want to make those variables accessible to my C++ application to read.  I am using WinInet functions to communicate with the script. 

Can somebody explain to me what I have to do in my php script be able to access the variables directly.

The below script gets the value $var = $_GET['Version']; that is sent from my C++ app.  It then reads from the DB table the Version number entered in the table.  Then compares the version number from my C++ app to the DB version number.   Now I want to make the Version Number from the DB accessible to my C++ app.  I want to be able to get the exact value stored in: $row['VersionNumber']; with my C++ app.

<?php
$dbhost = 'host';
$dbuser = 'dbusername';
$dbpass = 'dbpass';

mysql_connect($dbhost, $dbuser, $dbpass) or die                      ('Error connecting to mysql');
$dbname = 'MyDbsName';
mysql_select_db($dbname);
$query = mysql_query("SELECT * FROM Users");
$var = $_GET['Version'];
while($row = mysql_fetch_array($query))
{
    if($var == $row['VersionNumber'])
    {
    echo $row['VersionNumber'];
    }
}
?>

I have a long PHP script that I didn't write.  I'd like to get a simple text list of all the unique variables from the script -- all variables within the script that begin with $, such as

$_ADMIN
$query
$category
$user
$id
$result, etc.....

Any ideas how a PHP dabbler can go about this?  I did a PHPFreaks search, but didn't find a thread on this.

Thank you!

Hello,

I am new to PHP and would like to know what I am doing incorrectly.  I have designed a login form which contains two variables: the username and the password.

So for the username:

<input type="hidden" name="email" id="email" value="example_username">

And for the password:

<input type="password" name="password" id="password" size="15">

I then created a php script which I want to pass the variables "email" and "password" to the e-mail address:
 
 
<?php



{

   $message = "$email";

   $message2 = "$password";

   mail ("email@myserver.com", "Hello", $message, $message2);



}

?>


This should happen through the command:

<action="http://www.myserver.com/myscript.php" method="post">

All I get is a blank email with the subject "Hello".  Why are the email and password variables not being passed to my email by the php script?

Thanks.

Hey guys,   I'm using the following pagination script from a website I found. I'ts basically a pagination script that takes data from a MySQL database and displays a certain number of sets before placing the next set on a new page.   This script works great if I substitute a static value for the data I want returned but If the request is stored in a $POST variable like from an HTML form the data refuses to paginate. It will render the first set of data but will not paginate the rest and only shows blank pages   I'm thinking it has something to do with the $POST variable not being set or carrying over to each page but I'm not sure.   I truly appreciate the help!

<?php
	/*
		Place code to connect to your DB here.
	*/
	include('config.php');	// include your code to connect to DB.

	$tbl_name="";		//your table name
	// How many adjacent pages should be shown on each side?
	$adjacents = 3;
	
	/* 
	   First get total number of rows in data table. 
	   If you have a WHERE clause in your query, make sure you mirror it here.
	*/
	$query = "SELECT COUNT(*) as num FROM $tbl_name";
	$total_pages = mysql_fetch_array(mysql_query($query));
	$total_pages = $total_pages[num];
	
	/* Setup vars for query. */
	$targetpage = "filename.php"; 	//your file name  (the name of this file)
	$limit = 2; 								//how many items to show per page
	$page = $_GET['page'];
	if($page) 
		$start = ($page - 1) * $limit; 			//first item to display on this page
	else
		$start = 0;								//if no page var is given, set start to 0
	
	/* Get data. */
	$sql = "SELECT column_name FROM $tbl_name LIMIT $start, $limit";
	$result = mysql_query($sql);
	
	/* Setup page vars for display. */
	if ($page == 0) $page = 1;					//if no page var is given, default to 1.
	$prev = $page - 1;							//previous page is page - 1
	$next = $page + 1;							//next page is page + 1
	$lastpage = ceil($total_pages/$limit);		//lastpage is = total pages / items per page, rounded up.
	$lpm1 = $lastpage - 1;						//last page minus 1
	
	/* 
		Now we apply our rules and draw the pagination object. 
		We're actually saving the code to a variable in case we want to draw it more than once.
	*/
	$pagination = "";
	if($lastpage > 1)
	{	
		$pagination .= "<div class=\"pagination\">";
		//previous button
		if ($page > 1) 
			$pagination.= "<a href=\"$targetpage?page=$prev\">� previous</a>";
		else
			$pagination.= "<span class=\"disabled\">� previous</span>";	
		
		//pages	
		if ($lastpage < 7 + ($adjacents * 2))	//not enough pages to bother breaking it up
		{	
			for ($counter = 1; $counter <= $lastpage; $counter++)
			{
				if ($counter == $page)
					$pagination.= "<span class=\"current\">$counter</span>";
				else
					$pagination.= "<a href=\"$targetpage?page=$counter\">$counter</a>";					
			}
		}
		elseif($lastpage > 5 + ($adjacents * 2))	//enough pages to hide some
		{
			//close to beginning; only hide later pages
			if($page < 1 + ($adjacents * 2))		
			{
				for ($counter = 1; $counter < 4 + ($adjacents * 2); $counter++)
				{
					if ($counter == $page)
						$pagination.= "<span class=\"current\">$counter</span>";
					else
						$pagination.= "<a href=\"$targetpage?page=$counter\">$counter</a>";					
				}
				$pagination.= "...";
				$pagination.= "<a href=\"$targetpage?page=$lpm1\">$lpm1</a>";
				$pagination.= "<a href=\"$targetpage?page=$lastpage\">$lastpage</a>";		
			}
			//in middle; hide some front and some back
			elseif($lastpage - ($adjacents * 2) > $page && $page > ($adjacents * 2))
			{
				$pagination.= "<a href=\"$targetpage?page=1\">1</a>";
				$pagination.= "<a href=\"$targetpage?page=2\">2</a>";
				$pagination.= "...";
				for ($counter = $page - $adjacents; $counter <= $page + $adjacents; $counter++)
				{
					if ($counter == $page)
						$pagination.= "<span class=\"current\">$counter</span>";
					else
						$pagination.= "<a href=\"$targetpage?page=$counter\">$counter</a>";					
				}
				$pagination.= "...";
				$pagination.= "<a href=\"$targetpage?page=$lpm1\">$lpm1</a>";
				$pagination.= "<a href=\"$targetpage?page=$lastpage\">$lastpage</a>";		
			}
			//close to end; only hide early pages
			else
			{
				$pagination.= "<a href=\"$targetpage?page=1\">1</a>";
				$pagination.= "<a href=\"$targetpage?page=2\">2</a>";
				$pagination.= "...";
				for ($counter = $lastpage - (2 + ($adjacents * 2)); $counter <= $lastpage; $counter++)
				{
					if ($counter == $page)
						$pagination.= "<span class=\"current\">$counter</span>";
					else
						$pagination.= "<a href=\"$targetpage?page=$counter\">$counter</a>";					
				}
			}
		}
		
		//next button
		if ($page < $counter - 1) 
			$pagination.= "<a href=\"$targetpage?page=$next\">next �</a>";
		else
			$pagination.= "<span class=\"disabled\">next �</span>";
		$pagination.= "</div>\n";		
	}
?>

	<?php
		while($row = mysql_fetch_array($result))
		{
	
		// Your while loop here
	
		}
	?>

<?=$pagination?>
	

Code: [Select]
<?php 
session_start();
$_SESSION['is_logged_out'] = 1;
if($_SESSION['is_logged_out'] ==1)
{
 echo("<SCRIPT LANGUAGE='JavaScript'>window.alert('You had been successfully signed out')</SCRIPT>");
 session_unset();
 session_destroy();
 header("Location:chatframe.php");
}
?>
I got this error   Warning: Cannot modify header information - headers already sent by (output started at C:\xampp\htdocs\login\logout.php:6) in C:\xampp\htdocs\login\logout.php on line 9


which mistake im put?

this is not working

Code: [Select]
<?php

session_start();
$username = $_SESSION['username'];
echo mysql_query("UPDATE members SET online='0' WHERE username='$username' AND online='1'");
session_destroy();

echo "You've been logged out. <a href='index.php'>Click here</a> to return.";

?>
what im trying to do is change the online mysql data from 1 back to 0 as i want to show when a user is on and off line

can anyone help

Hi,

How logout is executed after 15 min. if does not hit or refresh any page.

Hi, im new here 

Need some help.

I have a database which contains users, and for every user i have logged_in value which is 1 if user is logged in and 0 if not. I use this so that user can be logged in only once.
When user clicks on logout link i set logged_in on 0.
My problem is when browser closes logged_in for current user is not set to 0, and after that user can't login because my site thinks he is already logged in.

is there some way I can call some function when browser exits or any other solution?

please help