PHP - Session Problem

Hi guys.

Im making a script that stores different contents in sessions. And everything seems to be working fine. I previously had some problems with it, but managed to fix them. Now somehow a new problem have accrued for me. I did not do anything to it since it last worked. So i am a little confused. It keeps telling me that the session does not have any content.

I think that the problem is within these two files he

http://pastebin.com/T6sfzjWn

and

http://pastebin.com/BUAuFp6t

It keeps giving me the error on line 24 from the second file.

Can someone please help me and say what i am doing wrong?

Hi,
I"m trying to make an external link to a web page. Them problem is that when my user clicks on the link they are taken to the destination web page, but they see an error "Your session has expired". At that point, they must either refresh the browser or exit out and click again in order to see the page.
My question is, how can I go around this problem in my code? If at all possible, I like to be able to add something to the URL so that this does not happen. Any help or guidance is appreciated.

Hi,
I my first problem is hashing passwords to md5.
My second problem is defining session on value from db.
There is my code but not working.
Code: [Select]
mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name")or die("cannot select DB");

 
$username=$_POST['username'];
$password=$_POST['password'];
$hash = md5($password);


$username = stripslashes($username);
$password = stripslashes($password);
$username = mysql_real_escape_string($username);
$password = mysql_real_escape_string($password);

$sql="SELECT * FROM $tbl_name WHERE where username = '$username' and password = '$hash'";
$result=mysql_query($sql);

$count=mysql_num_rows($result);

if($count==1){
$sql2="SELECT access FROM $tbl_name WHERE username='$username' and password='$password'";
$access=mysql_query("$sql2");
session_register("username");
session_register("password");
session_register("access");
$_SESSION["access"]=$access;
header("location:success.php");
}
else {
echo "Invalid Username or Password";Thanks for any answers.

I'm using Session variables for the first time on a site I'm developing. I had it working fine while I was doing some admin and testing in subfolders. But the problem is I'm losing the session variables when I load the page from www.example.com, but it works from www.example.com/index.php. I would be happy to post some code if needed.

which is the best place to put this code :

Code: [Select]
if(isset($_SESSION['last_ip'])===false){
$_SESSION['last_ip']=$_SERVER['REMOTE_ADDR'];
}
if($_SESSION['last_ip']!==$_SERVER['REMOTE_ADDR']){
session_unset();
session_destroy();
}
like this :

Code: [Select]
class session {
public $user_on=false;
public $user_id;

function __construct(){
//make sure that javascript can not access session variable
ini_set('session.cookie_httponly',true);
session_start();
//set the last ip the user has logged on with
if(isset($_SESSION['last_ip'])===false){
$_SESSION['last_ip']=$_SERVER['REMOTE_ADDR'];
}
if($_SESSION['last_ip']!==$_SERVER['REMOTE_ADDR']){
session_unset();
session_destroy();
}
$this->check_login();
}

private function check_login(){
if(isset($_SESSION['user_id'])){
global $user;
$this->user_id=$_SESSION['user_id'];
$this->user_on=true;
$user->find_by_id($this->user_id);
} else {
unset($this->user_id);
$this->user_on=false;
}
}
}
OR :
Code: [Select]
function __construct(){
//make sure that javascript can not access session variable
ini_set('session.cookie_httponly',true);
session_start();
$this->check_login();
}

private function check_login(){
if(isset($_SESSION['user_id'])){
global $user;
                        [b]//set the last ip the user has logged on with
if(isset($_SESSION['last_ip'])===false){
$_SESSION['last_ip']=$_SERVER['REMOTE_ADDR'];
}
if($_SESSION['last_ip']!==$_SERVER['REMOTE_ADDR']){
session_unset();
session_destroy();
}[/b]
                elseif($_SESSION['last_ip']===$_SERVER['REMOTE_ADDR']){
$this->user_id=$_SESSION['user_id'];
$this->user_on=true;
$user->find_by_id($this->user_id);
                 }
} else {
unset($this->user_id);
$this->user_on=false;
}
}
}

hi i want to include session so that attendance.php can't be acess directly..

hello all,

I have a client that wants to protect their web page with a password protected landing page. Once the password is entered the user is directed to a "disclaimer" page that they have to agree to first before going into the site. I have put both the landing page and the disclaimer page in my root directory and then the site I put in a sub directory /cms/

in the main site index.php I check for the post password and then set a $_COOKIE for the user that will expire in 1 month
<?php 
// this goes on the very top of the index.php file in the template you are using
//check if user has entered password and needs cookie set
if(isset($_POST['fpass']) && !isset($_COOKIE['fpass'])) setcookielive('fpass', $_POST['fpass'], strtotime( '+1 month' ));


function setcookielive($name, $value='', $expire=0, $path='', $domain='', $secure=false, $httponly=false) {
    //set a cookie as usual, but ALSO add it to $_COOKIE so the current page load has access
    $_COOKIE[$name] = $value;
    return setcookie($name,$value,$expire,$path,$domain,$secure,$httponly);
}

The next thing I do is check if a user is trying to access the main site with having the COOKIE - if so I redirect the user to the landing page
//check if user has not entered password
if (!isset($_COOKIE['fpass']) || $_COOKIE['fpass'] == "") header('location: http://www.mypage.com');

This works fine up to this point.
Now my problem is that I also need to check if a user has the month long cookie set but is trying to access the main page without viewing the disclaimer page first.
I thought this would work:
//check if the user has a cookie set but is on a new session
if (isset($_COOKIE['fpass']) && !isset($_SESSION['fpass'])) header('location: http://www.mypage.com/disclaimer.php');
But this only throws the user into a loop of "disclaimer" -> "landing page" -> "disclaimer" etc. They can never get into the main site.

How do I check for the cookie and whether the user has visited the disclaimer page - but then allow the user to continue once they go to the disclaimer page?

NB: the $_SESSION is not set until the main site.

For a while now I've been getting intermittent problems with PHP either slowing down or very occasionally timing out for no apparent reason. For the first time it's happened a number of times today and there is an error message in the logs:

PHP Fatal error:  Maximum execution time of 30 seconds exceeded in functions.php on line 4, referer:search.php

The odd thing is that line 4 of functions.php only contains: $sess = session_id();

I've never had a problem with PHP that digging around in this forum hasn't solved but this one has me stumped.

Anyone got any ideas?

TIA

Hello,

I have the $_session code working, but after I destroy the session and I am asked to log in again, my browser doesn't ask me for my password and just logs me in.

I don't understand because I have destroyed my session and I have deleted the data in $_SESSION and I have deleted the info in the cookie so it shouldn't log me in automatically. I thought it was something in my browser, but I erased my history and I never saved any password.

Here's my code:

This is the welcome page

<?php
    require_once 'login.php';
    $connection = new mysqli($db_hostname, $db_username, $db_password, $db_database);
    
    if ($connection->connect_error) die($connection->connect_error);
    
    if (isset($_SERVER['PHP_AUTH_USER']) && isset($_SERVER['PHP_AUTH_PW']))
    {
        $un_temp = mysql_entities_fix_string($connection, $_SERVER['PHP_AUTH_USER']);
        $pw_temp = mysql_entities_fix_string($connection, $_SERVER['PHP_AUTH_PW']);
        
        $query = "SELECT * FROM users WHERE username='$un_temp'";
        $result = $connection->query($query);
        
        if (!$result) die($connection->error);
        elseif ($result->num_rows)
        {
            $row = $result->fetch_array(MYSQLI_NUM);
            
            $result->close();
            
            $salt1 = "qm&h*";
            $salt2 = "pg!@";
            
            $token = hash('ripemd128', "$salt1$pw_temp$salt2");
            
            if ($token == $row[3])
            {
                session_start();
                $_SESSION['username'] = $un_temp;
                $_SESSION['password'] = $pw_temp;
                $_SESSION['forename'] = $row[0];
                $_SESSION['surname'] = $row[1];
                
                echo "$row[0] $row[1] : Hi $row[0], you are now logged in as '$row[2]'";
                
                die("<p><a href=continue.php>Click here to continue</a></p>");
            }
            else die("Invalid username/password combination");
        }
        else die("Invalid username/password combination");
    }
    else
    {
        header('WWW-Authenticate: Basic realm="Restricted Section"');
        header('HTTP/1.0 401 Unauthorized');
        die("Please enter your username and password");
    }
    $connection->close();
        
    function mysql_entities_fix_string($connection, $string)
    {
        return htmlentities(mysql_fix_string($connection, $string));
    }
        
    function mysql_fix_string($connection, $string)
    {
        if (get_magic_quotes_gpc()) $string = stripslashes($string);
        return $connection->real_escape_string($string);
    }
?>

and this is the other page:

<?php
    session_start();
    
    if(isset($_SESSION['username']))
    {
        $username = $_SESSION['username'];
        $password = $_SESSION['password'];
        $forename = $_SESSION['forename'];
        $surname = $_SESSION['surname'];
        
        destroy_session_and_data();
        
        echo "Welcome back $forename. <br>
            Your full name is $forename $surname.<br>
            Your username is '$username'
            and your password is '$password'.";
    }
    
    else echo "Please <a href='authenticate2.php'>Click here</a> to log in.";
    
    function destroy_session_and_data()
    {
        $_SESSION = array();
        setcookie(session_name(), '', time() - 2592000,'/');
        session_destroy();
    }
?>

 

When I type the website in i first get prompt to enter my password, when I am authenticated the webpage says: You are now logged in click here to continue. When I do I am directed to another page which confirms that I am still logged in. Then I press refresh and the webpage asks me to "Click here to log in". I do, but it doesn't ask me for my password again. Why? My personal info should be destroyed.

Thank you for responding. It's greatly appreciated

 

 

 

Hi. I have to check if a session is started or not, and then, check for the rank of the user. For that i use two functions like is_administrator,etc.

Well, but this isnt working. I cant get any clear way to know if a session have been already started or not.
Code: [Select]
function is_administrator() {
session_start();
if (isset($_SESSION['usr']) and empty($_SESSION['usr'])) {

$l = conect();
$user = $_SESSION['usr'];
$cons = "SELECT * FROM `users` WHERE usr='" . $user . '\';';
$res = mysql_query ($cons,$l);
$ob = mysql_fetch_array($res);

if ($ob['tipo'] == 'A') {
return true;
}

}
return false;
}

What i want to do is to check if a sesion exist, if not, return false. If the sesion exist, check for the user rank and return true/false.

I use session code to keep post data. It does not work well .  I have put the program on the web site. This is the link .  http://www.ptiimaging.ca/xx.php   

The program is for the whole web page. 


<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<link rel="stylesheet" type="text/css" href="mainpage.css" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>&#26080;&#26631;&#39064;&#25991;&#26723;</title>
</head>
<body>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<link rel="stylesheet" type="text/css" href="mainpage.css" />
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<title>&#26080;&#26631;&#39064;&#25991;&#26723;</title>
</head>
<body>
<div class="block"> <div class="logo">

<img src="images/ptiwci_logo_btrfly.jpg" />

<div class="boxlog">
<strong><p class="name">Nizar Goa</p></strong><br />
<em class="wordsinlogo">Managing Director</em><br />
<p class="details">#101, 17873-106A Avenue</p><br />
<p class="details">Edmonton,AB T5S 1V8</p><br />
<p class="details">PH (780) 452-3801</p><br />
<p class="details">FAX (780) 452-3832</p><br />
<p class="details">Cell (780)498-2072</p><br />
<p class="details">ptican@telus.net</p>
</div>

<p class="lastwords">Toners . Inkjets . Ribbons . Datamedia . Printers</p>
</div>

<div id="navcontainer">
<ul>
<li><a href="index.php">Home</a></li>
<li><a href="company.php">Company</a></li>
<li><a href="product.php">Product</a></li>
<li><a href="contract.php">Contract us</a></li>
<li><a href="bestseller.php">Top seller</a></li>
<li><a href="new.php">New product</a></li>
</ul>
</div>
<div class="searchbox">
<form action="table3.php" method="post">

<input type="submit" name="submit" value="submit" />


<input type="text" name="search" />


</form>




<p>Please search by OEM number</p>







</div>
<div class="clear"></div>
<div class="rollingpicture left">
<object id="bcastr4" data="bcastr4.swf?xml=bcastr.xml" type="application/x-shockwave-flash" width="610.584" height="220">
<param name="movie" value="bcastr4.swf" />
</object>
</div>
<div class="xsnazzy">
<b class="xtop"><b class="xb1"></b><b class="xb2 color_a">
</b><b class="xb3 color_a"></b><b class="xb4 color_a"></b></b>
<div class="xboxcontent">
<h1 class="color_a">search</h1>

<form action="xx.php" method="post">
<select name="brand">
<option >brand</option>
<option value="Apple">Apple</option>

<option value="brother">Brother</option>
<option value="Canon">Canon</option>
<option value="Dell">Dell</option>
<option value="Epson">Epson</option>
<option value="HP">HP</option>
<option value="lexmark">Lexmark</option>
<option value="Samsung">Samsung</option>
<option value="Sharp">Sharp</option>
<option value="IBM">IBM</option>
<option value="Lenovo">Lenovo</option>
<option value="Konica-Minolta">Konica-Minolta</option>

<option value="okidata">okidata</option>
<option value="Mita">Mita</option>
<option value="Ricoh">Ricoh</option>
<option value="Source technology">Source technology</option>
<option value="Standard Register">Standard Register</option>
<option value="Tally Genicom">Tally Genicom</option>
<option value="Tektronix">Tektronix</option>
<option value="Toshiba">Toshiba</option>
<option value="Unisys">Unisys</option>
<option value="Xerox">Xerox</option>
<option value="Xerox Ink Stricks">Xerox Ink Sticks</option>
<option value="kyocera">kyocera</option>
<option value="Postage Meters">Postage Meters</option>
</select>
<br />
<select name="sort">
<option >kind</option>
<option value="Copier Toner">Copier Toner</option>
<option value="Laser Toner">Laser Toner</option>
<option value="MICR Toner">MICR Toner</option>
<option value="Inkjet">Inkjet</option>





</select><Br />
<select name="type">
<option >for</option>
<option value="PC">Photo copier</option>
<option value="Fax">Fax</option>
<option value="Copier">Copier</option>
<option value="Cheque">Cheque</option>
<option value="Print">Printer</option>
<option value="Copier/Fax">Copier/Fax</option>
</select> <br />


<input type="submit" value="submit" name="submit" />
</form>
</div>
<b class="xbottom"><b class="xb4"></b><b class="xb3"></b>
<b class="xb2"></b><b class="xb1"></b></b>
</div>
<div class="leftlist left">
<div class="nextbox"><strong>
<center>
Inkjet
</center>
</strong></div>
<ul>
<li><a href="table.php?id=<?php echo "Brother" ;?>&cd=<?php echo "Inkjet"; ?>">Brother</a></li>
<li><a href="table.php?id=<?php echo "Kodak" ;?>&cd=<?php echo "Inkjet"; ?>">Kodak</a></li>
<li><a href="table.php?id=<?php echo "PitenyBowes-PostageMeter&Franking system" ;?>&cd=<?php echo "Inkjet"; ?>">PitenyBowes-PostageMeter</a></li>
<li><a href="table.php?id=<?php echo "Canon" ;?>&cd=<?php echo "Inkjet"; ?>">Cannon</a></li>
<li><a href="table.php?id=<?php echo "Dell" ;?>&cd=<?php echo "Inkjet"; ?>">Dell</a></li>
<li><a href="table.php?id=<?php echo "HP" ;?>&cd=<?php echo "Inkjet"; ?>">HP</a></li>
<li><a href="table.php?id=<?php echo "Lexmark" ;?>&cd=<?php echo "Inkjet"; ?>">Lexmark</a></li>
<li><a href="table.php?id=<?php echo "Samsung" ;?>&cd=<?php echo "Inkjet"; ?>">Samsung</a></li>
<li><a href="table.php?id=<?php echo "sharp" ;?>&cd=<?php echo "Inkjet"; ?>">sharp</a></li>
<li><a href="table.php?id=<?php echo "Xerox" ;?>&cd=<?php echo "Inkjet"; ?>">Xerox</a></li>
</ul>
<div class="nextbox"><strong>
<center>
Laser/MICR/Fax/TFR
</center>
</strong></div>
<ul>
<li><a href="table.php?id=<?php echo "Apple" ;?>&cd=<?php echo " Toner"; ?>">Apple</a></li>
<li><a href="table.php?id=<?php echo "Brother" ;?>&cd=<?php echo " Toner"; ?>">Brother</a></li>
<li><a href="table.php?id=<?php echo "Canon" ;?>&cd=<?php echo " Toner"; ?>">Canon</a></li>
<li><a href="table.php?id=<?php echo "Dell" ;?>&cd=<?php echo " Toner"; ?>">Dell</a></li>
<li><a href="table.php?id=<?php echo "Epson" ;?>&cd=<?php echo " Toner"; ?>">Epson</a></li>
<li><a href="table.php?id=<?php echo "HP" ;?>&cd=<?php echo " Toner"; ?>">HP</a></li>
<li><a href="table.php?id=<?php echo "IBM/Lenovo" ;?>&cd=<?php echo " Toner"; ?>">IBM/Lenovo</a></li>

<li><a href="table.php?id=<?php echo "Kyocera/Mita" ;?>&cd=<?php echo " Toner"; ?>">Kyocera/Mita</a></li>
<li><a href="table.php?id=<?php echo "Konica-Minolta/Minolta QMS " ;?>&cd=<?php echo " Toner"; ?>"> Konica-Minolta/Minolta QMS </a></li>
<li><a href="table.php?id=<?php echo "Konica" ;?>&cd=<?php echo " Toner"; ?>">Konica</a></li>

<li><a href="table.php?id=<?php echo "Lexmark" ;?>&cd=<?php echo " Toner"; ?>">Lexmark</a></li>
<li><a href="table.php?id=<?php echo "Minolta" ;?>&cd=<?php echo " Toner"; ?>">Minolta</a></li>
<li><a href="table.php?id=<?php echo "Okidata" ;?>&cd=<?php echo " Toner"; ?>">Okidata</a></li>
<li><a href="table.php?id=<?php echo "Ricoh" ;?>&cd=<?php echo " Toner"; ?>">Ricoh</a></li>
<li><a href="table.php?id=<?php echo "Samsung" ;?>&cd=<?php echo " Toner"; ?>">Samsung</a></li>

<li><a href="table.php?id=<?php echo "TallyGenicom" ;?>&cd=<?php echo " Toner"; ?>">Tally Genicom</a></li>
<li><a href="table.php?id=<?php echo "Tektronix" ;?>&cd=<?php echo " Toner"; ?>">Tektronix</a></li>
<li><a href="table.php?id=<?php echo "Toshiba" ;?>&cd=<?php echo " Toner"; ?>">Toshiba</a></li>
<li><a href="table.php?id=<?php echo "Unisys" ;?>&cd=<?php echo " Toner"; ?>">Unisys</a></li>
<li><a href="table.php?id=<?php echo "Xerox" ;?>&cd=<?php echo " Toner"; ?>">Xerox</a></li>
<li><a href="table.php?id=<?php echo "Xero Ink Sticks" ;?>&cd=<?php echo " Toner"; ?>">Xerox Ink Sticks</a></li>
<li><a href="table.php?id=<?php echo "Gestetner" ;?>&cd=<?php echo " Toner"; ?>">Gestetner</a></li>
<li><a href="table.php?id=<?php echo "Lanier" ;?>&cd=<?php echo " Toner"; ?>">Lanier</a></li>
<li><a href="table.php?id=<?php echo "TROY" ;?>&cd=<?php echo " Toner"; ?>">TROY</a></li>
<li><a href="table.php?id=<?php echo "Lexmark/Troy" ;?>&cd=<?php echo " Toner"; ?>">Lexmark/Troy</a></li>
<li><a href="table.php?id=<?php echo "Okidata" ;?>&cd=<?php echo " Toner"; ?>">Okidata</a></li>
<li><a href="table.php?id=<?php echo "Sharp" ;?>&cd=<?php echo " Toner"; ?>">Sharp</a></li>
<li><a href="table.php?id=<?php echo "Piteny Bowes /Imagistics" ;?>&cd=<?php echo " Toner"; ?>">Piteny Bowes /Imagistics</a></li>
<li><a href="table.php?id=<?php echo "Panasonic" ;?>&cd=<?php echo " Toner"; ?>">Panasonic</a></li>
<li><a href="table.php?id=<?php echo "Savin" ;?>&cd=<?php echo " Toner"; ?>">Savin</a></li>
<li><a href="table.php?id=<?php echo "HP/ Troy" ;?>&cd=<?php echo " Toner"; ?>">HP/ Troy</a></li>
<li><a href="table.php?id=<?php echo "Source Technologies" ;?>&cd=<?php echo " Toner"; ?>">Source Technologies</a></li>

<li><a href="table.php?id=<?php echo "Ricoh/SindoRicoh" ;?>&cd=<?php echo " Toner"; ?>">Ricoh/SindoRicoh</a></li>
<li><a href="table.php?id=<?php echo "Royal Copystar/Copystar" ;?>&cd=<?php echo " Toner"; ?>"> Royal Copystar/Copystar</a></li>
<li><a href="table.php?id=<?php echo "Source Technologies" ;?>&cd=<?php echo " Toner"; ?>"> Standard Register</a></li>


</ul>
</div>
<div class="boxright right">
<?php

include("connection.php");

session_start();

 $_SESSION['brand']=$_POST['brand'];
$_SESSION['type']=$_POST['type'];
$_SESSION['sort']=$_POST['sort'];

if (isset($_GET["page"])) { $page = $_GET["page"]; } else { $page=1; };
$start_from = ($page-1) * 23;


$select="select * from $chun where  brand = '$_SESSION[brand]'  or sort='$_SESSION[sort]' or type ='$_SESSION[type]'  LIMIT $start_from, 18";


$result2=mysql_query($select, $connection) or die (mysql_error());



?>
<h1 >Inkjet and Toner Cartridges for the printing device </h1>
<p class="writeword">PTi is a leading Remanufacturer and distributor of compatible cartridges and orginal product. We also offer the most comprehensive selection of remanufactured ink cartridges for HP printers at low prices. Along with our 100% Quality Guaranteed HP toner cartridges, we also offer high quality compatible inkjet cartridges for many printers at highly competitive prices. All our products are proudly manufactured in the U.S.A.

Enter your search criteria at the top of the page to view details on a specific cartridge. For our award winning customer service, call (780) 4523801 </p>
<table class="tableinsert">
<tr>

<th>Pti Item#</th>
<th>OEM Part#</th>
<th>Machine Compatibilty</th>
<th>Color</th>
<th>Dealer price</th>
<th>OEM Price</th>
</tr>
<?php



while ($row=mysql_fetch_array($result2)) {




?>
<tr>

<td><?php echo $row['item'];?></td>
<td><a href="ddl.php?wd=<?php echo $row['id'] ;?>"><?php echo $row['oempart'];?></a></td>
<td><?php echo $row['compatibility'];?></td>
<td><?php echo $row['colorful'];?></td>


<td>$<?php echo $row['comprice']; ?></td>
<td><?php echo $row['oemprice']; ?></td>
</tr>
<?php



};


?>
</table>
<?php
$sql = "select count(*) from $chun  where    brand = '$_SESSION[brand]' or  type ='$_SESSION[type]' or sort='$_SESSION[sort]'  ";

$rs_result = mysql_query($sql,$connection);
$row = mysql_fetch_row($rs_result);
$total_records = $row[0];
$total_pages = ceil($total_records / 23);

for ($i=1; $i<=$total_pages; $i++) {



?>


 <div class="trunpage"><a href='table2.php?page=<?php echo  "$i" ; ?>&id=<?php echo $_SESSION['brand'];?>&cd=<?php echo $_SESSION['type'];?>&td=<?php echo $_SESSION['sort'];?>'  ><?php echo  "$i" ; ?></a>
     
        </div>



<?php
}
?>


</div>
<div class="lineone"></div>

<div class="footer">
<p>Copyright 2007-2010 www.ptiimaging.ca Inc. Canada All rights reserved.
You can reach us at : By Mail: 17873 106a ave, Unit 101 Edmontn Alberta T5S 1V8 By phone: 1-780-452-3801 By Fax: 1-780-452-3832 By email: ptican@telus.net </p>
</div>

</div>
</body>
</html>

I am trying to send some arrays to another page using sessions. The first array I send works fine when I simply print the array on the next page but the second and third arrays are not being created.

Code
Code: [Select]
<?php
 
require("dbconn.php");
$query = mysql_query("SELECT username, idcustomers FROM customers
WHERE username='$customeruser' ");

if (!$query) {
die('Invalid query: ' . mysql_error());}

$row = mysql_fetch_assoc($query);
echo $row['username'];
$id=$row['idcustomers']; 
echo $id;

$productquery = mysql_query("SELECT productid, price1, price2, price3, price1_type, price2_type, price3_type, prod_name, price_det FROM  product_pricing
WHERE idcustomers='" . mysql_real_escape_string($id) . "' ORDER BY productid");

if (!$productquery) {
die('Invalid query: ' . mysql_error());}


$counter = 1;
$itemcode_array = array();
while ($row = mysql_fetch_assoc($productquery)) {



?>
<tr class="ordertable">
<td class="table_item" name="itemcode<?php echo $counter;?>"><?php echo $row['productid']; ?></td><?php $itemcode_send = $row['productid']; array_push($itemcode_array, $itemcode_send); ?>
<td class="table_name" name="prodname<?php echo $counter;?>"><?php echo $row['prod_name']; ?></td><?php $prod_name_send = $row['prod_name']; array_push($prodname_array, $prod_name_send); ?>
<td class="table_pdet" name="prod_det<?php echo $counter;?>"><?php echo $row['price_det']; ?></td><?php $price_det_send = $row['price_det']; array_push($pricedet_array, $price_det_send); ?>
<td class="table_price" name="price1<?php echo $counter;?>"><?php echo $row['price1_type']; ?> $<?php echo $row['price1']; ?></td>
<td class="table_quant" name="quant1"><input type="text" name="quant1<?php echo $counter;?>" size="4" /></td>
<td class="table_price" name="price2<?php echo $counter;?>"><?php echo $row['price2_type']; ?> $<?php echo $row['price2']; ?></td>
<td class="table_quant" name="quant2"><input type="text" name="quant2<?php echo $counter;?>" size="4" /></td>
<td class="table_price" name="price3<?php echo $counter;?>"><?php echo $row['price3_type']; ?> $<?php echo $row['price3']; ?></td>
<td class="table_quant" name="quant3"><input type="text" name="quant2<?php echo $counter;?>" size="4" /></td>
<td class="table_note" name="notes"><input type="text" name="note<?php echo $counter;?>" size="28" /></td>
</tr>

<?php
($counter++);
} ?>
<?php mysql_close($dbConn); ?>

</table>
<p><input type="submit" name="submit" value="Confirm" />&nbsp;<input type="reset" /></p>
</form>


<?php print_r($prodname_array);

$_SESSION["itemcode"] = $itemcode_array;
 $_SESSION["prodname"] = $prodname_array;
 $_SESSION["pricedet"] = $pricedet_array; ?>



There is some redundant and error testing code in there.

The problem is $prodname_array; and $pricedet_array; are not being created even though $itemcode_array which is created the same way works fine. All values from the database are being displayed correctly  (eg $row['prod_name'].

I'm trying to use a boolean 'true' or 'false' to tell the page that when false, he/she is logged out and send them to loggin page..other wise display the name which is taken from the session....i made the session stuff in a class and i have it as follows:

Code: [Select]
<?php
include("includes/functions.php");

class Session{
    
    public $logged_in = false; // the one i'm on about
    public $key;
    
    // $_session[$key] = $value
    public function set($key, $value){//setting session
$_SESSION[$key] = $value;
if(isset($_SESSION[$key])){
    $this->logged_in = true;
}
    }
    
    public function get($key){ //getting session
if(isset($_SESSION[$key])){
    return $_SESSION[$key];
}
else{
    return false;
}
    }
    
    
    public function confirm_logged_in(){ //check if logged in
        if(!$this->logged_in)
redirect_to("login.php"); // a tailored method
    }
    
    public function logout(){ 
session_start();
session_unset();
session_destroy();
$this->logged_in = false; 
    }
}
$session = new Session();
?>
unfortunately when i set the session on one page (say after login) assuming that the $logged_in variable is now turned to TRUE, but when I go to another page (e.g. Index.php)  and Get the allready set session and perform the test confirm_logged_in() it does the OPPOSITE to what I would expect as for example: redirecting me to login.php even when its "supposed to be"  $logged_in=true as set in the set function above.

any help would be appreciated...suggestions to change syntax or any as such...thanks

I thought I had somewhat of a mastery of sessions, until I encountered this problem.  Basically, I'm trying to built a session expired code which is a little bit deviated from your everyday session expired codes.  I want the user of a website to be logged out automatically after the session expires, and redirected to the login page.  But I also need that, if any other user tried to access that same website without having previously been logged on, he should be redirected not to the login page but the signup page.  So basically, the same page (index.php) should redirect the user to login.php if he was logged in and his session expired after 1 minute, or signup.php if he wasn't logged in and tried to access home.php.

So what I tried to do to accomplish this was

- Declare two session variables $_SESSION['id'] = "some value from database" and  $_SESSION['logged_in'] = TRUE everytime the user succesfully logs in.

-At the top of index.php, right after session_start(), check to see if 1 minute has elapsed since last activity and if so, unset $_SESSION['logged_in'] without destroying the session.  So presumably, all other session variables including $_SESSION['id'] and the session itself remain intact.

-Right below that, check if $_SESSION['id'] is set.  If not(meaning the session is not active and hence no user was logged in), redirect to signup.php.   If it is set, then check if $_SESSION['logged_in'] is set and if not, redirect to login.php

Now to the code itself


Code: [Select]

<?php


//address error handling

ini_set ('display_errors', 1);
error_reporting (E_ALL & ~E_NOTICE);



//Check if max allowable time has elapsed

if (isset($_SESSION['LAST_ACTIVITY']) && (time() - $_SESSION['LAST_ACTIVITY'] > 60)) {

    // last request was more than 1 minute ago
 
    unset($_SESSION['logged_in']);     // unset logged_in session variable for the runtime


}

$_SESSION['LAST_ACTIVITY'] = time(); // update last activity time stamp



        //Get the current page url to pass on to the session expired page.
$url=urlencode("http://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI']);


//Check whether the session variable id is present or not

if(!isset($_SESSION['id']) || (trim($_SESSION['id']) == '')) {

 session_destroy();

 header("location: signup.php");

exit();

}else{//If session id is set meaning the session is alive and hasn't been destroyed


if(!isset($_SESSION['logged_in'])){//If this variable is not set, then session must have expired because this is the variable we unset upon sesssion expire. The session is still alive though and we must destroy it

//Redirect to login.php and pass on the page url

$msg = "Your Session Expired Due to Inactivity. Login Below";

session_destroy();


header("location: login.php?url=$url&msg=$msg");


}//End of if logged in is not set


}//End of if session id is set




?>



Well the code works just as i want it to, except for this scenario.  If I login with some user's credentials, and open a new page, by typing in url.com in a new window, this new page doesn't redirect to url.com/signup.php but stays on url.com/index.php and all the session variables are available on this new page just like on the old page that was accessed by actually loging in.  Well that's expected.  The problem is, when the session expires on this page, it gets redirected to url.com/signup.php and not url.com/login.php as expected(note that with the old page that was accessed by actually login in, we do get redirected to url.com/login.php)  Now this bothers me because the website is supposed to be redirected to signup.php only if the user started a fresh session without having been logged in as the logic from the code above shows.  So, the $_SESSION['id'] variable actually exists(and I actually tested it by echoing it)but yet, the code behaves as if it doesn't with every new page.  What could possibly be going on here? I have tried using session_regenerate_id(), but that just keeps the session going without ever expiring.  I tried to use the actual session_id()itself in the place of $_SESSION['id'] but in that scenario, the page always gets redirected to url.com/login.php regardless of whether a user was previously logged in or not.


PS:  I dont think this has anything to do with the problem but worth noting that the url of a page opened after a user logs in is url.com/index.php but that of a page opened after a user is already logged in is simply url.com