PHP - $_get And Then Keep That Data In $_session

hey gang:

i have a number of variables stored in the $_SESSION array and wanted to know how i can keep them handy for use AFTER PayPal has done it's thing.  to help clarify, the desired process here is client fills out form. clicks PayPal button. form data is then used to create some documents which are then sent to client.  i have the flow working but without the PayPal part because i'm not sure how to preserve the form data while PayPal does it's thing so i can use it when PayPal is done.  am i making sense?  i'd like to steer away from client-side cookies because of security issues and our paranoid client insists on it...

bah.  first the JSON shuffle from JavaScript to PHP and now this PayPal mess. 

any help is MOST welcome.  TIA!

WR!

The below should choose the radio button that is set by the $_SESSION variable or default to 3. However, it's defaulting to 1.

Code: [Select]
$content.='
<p class="form_item"><label>Product Rating:</label><br />
<div class="rating_radio"><input type="radio" name="review_product_rating" value="1"';
if(isset($review_product_rating) && $review_product_rating=="1"){$content.='checked';}
$content.=' /> <br />1</div>
<div class="rating_radio"><input type="radio" name="review_product_rating" value="2"';
if(isset($review_product_rating) && $review_product_rating=="2"){$content.='checked';}
$content.=' /> <br />2</div>
<div class="rating_radio"><input type="radio" name="review_product_rating" value="3"';
if(isset($review_product_rating) && $review_product_rating=="3" || !isset($review_product_rating)){$content.='checked';}
$content.=' /> <br />3</div>
<div class="rating_radio"><input type="radio" name="review_product_rating" value="4"';
if(isset($review_product_rating) && $review_product_rating=="4"){$content.='checked';}
$content.=' /> <br />4</div>
<div class="rating_radio"><input type="radio" name="review_product_rating" value="5"';
if(isset($review_product_rating) && $review_product_rating=="5"){$content.='checked';}
$content.=' /> <br />5</div>
<div class="worst">(Worst)</div><div class="best">(Best)</div>
</p>

I'm figuring it's because it's multiple if statement (with no elseif) so it's evaluating the first if and being set to true. I tried changing everything else after the first one to elseif, and it's throwing an unexpected T_ELSEIF error.

This problem happens in both IE9 and Chrome 13.0.782.112 m on Windows

If I close the browser down, my session data is gone on browser restart, if however I just close the tab leaving other tabs say with BBC news and restart my app in a new tab, both browsers remember the old session data.

Since the intended user could do this at any time before completing a transaction, I don't actually get a chance to destroy the session this only happens if they complete payment for their order via..
Code: [Select]
  session_destroy();
  $conn->commit();
  $conn->autocommit(TRUE);

In an attempt to clean up I tried various combinations at the top of the start page "index.php"..

Code: [Select]
  session_start();
//  $_SESSION = array();
  session_destroy($_SESSION['cart']);
  session_destroy($_SESSION['address']);
//  $_SESSION['cart'] = array();
//  $_SESSION['address'] = array();
//  session_destroy();

Can anyone please shed any light on this behaviour difference?

Jamie

I recently had a customer say that one of my forms isn't working. For some reason the ID number is getting lost when she submits the form.

The form code looks like:
...
print "<form method='post' name='form' action='update.php'>";
...
print "<input type='hidden' name='id' value=\"$id\" />";
print "<input type='submit' name='submit' value=\"Save Session\" />";
print "</form>";
...

And the PHP code that gets executed looks like:
...
//GET SESSION ID
if(isset($_GET['id'])) {  //ID from HTML link, before updates have been made
    $id = $_GET['id'];
} elseif(isset($_POST['id'])) {  //ID from form, after updates have been made
    $id = $_POST['id'];
} else {
    $id = '';
}

//IF SESSION ID IS VALID
if(preg_match("/^\d+$/", $id)) {
    ...
//ELSE, INVALID ID
} else {
    $msg = "<span class='errorText'>Session ID not found or invalid.</span>";
}
...

For some reason she usually gets the "Session ID not found..." error when submitting the form. Do you see any problems with the above code?


Note that she has been able to sucessfully use the form before (in the same day); we have nearly 1,800 records submitted using these forms; and I am unable to duplicate the issue. So I'm at a loss on what to do next.

Also, she talked with her IT person about the form. The IT person was able to submit data on his computer. So he reset her Internet options which seemed to fix the problem on her end temporarily. Note that she is using IE 7. She also said that she doesn't have access to any other browsers.

I'm tempted to chalk this up as a personal computer issue, but wanted to get your input first.

After several attempts, I now have data displayed on my index.php page, but the data is from all rows. Luckily I have two rows. The page also has a menu - with two links.

What I would like help with is:

How to display index.php with just the data for it - i.e. home page data.

How to display data if either the ‘home’ or ‘copyright’ links are clicked.

I understand you can use $_GET[‘id’], and isset(), but I don’t know how to do that.

I include the full html page code:

<?php
// database connection
require_once('admin/databasecon.php');

?>
<!DOCTYPE html>
<html>

  <?php include 'includes/headsection.php'; ?>

  <body>

    <?php
    // displaying data
    $table = "pages";  // table
    $sqli = "SELECT * FROM $table ORDER BY id ASC";
    $result = $conn->query($sqli);
    ?>

    <!-- topMenu -->
    <table id="topMenu">

      <tr>
        <td><h1 class="siteName">Scarab Beetle</h1></td>

        <?php

        if ($result = mysqli_query($conn, $sqli)) {
          while($row = $result->fetch_assoc()) {
              echo  "<td class='navItem'>" . "<a href=index.php>" . $row["menuheader"] . "</a>" . "</td>";
          }
        }

        ?>
      </tr>

    </table>
    <!-- topMenu end -->

    <!-- timeline menu -->
     Menu goes here
    <!-- timeline menu end -->

    <!-- page title -->
    <?php

    if ($result = mysqli_query($conn, $sqli)) {
      while($row = $result->fetch_assoc()) {
          echo  "<h1 class='centered'>" . $row["pageheader"] . "</h1>";
      }
    }

    ?>

    <hr>

    <!-- page content -->
    <?php

    if ($result = mysqli_query($conn, $sqli)) {
      while($row = $result->fetch_assoc()) {
          echo  $row["pagetext"];
      }
    }

    ?>

    <hr>

    <div class="clear"></div>

    <!-- footer content -->
    <?php include 'includes/footersection.php'; ?>
    <!-- footer content end -->

  </body>

</html>

Any help to achieve what I want will be appreciated. Thank you.

First let me explain my code.
It comprises of three php files.

inc_fn_header_and_menu.php,  contains the HTML and CSS header details and it initializes the session via session_start();

 

This  is later included in project_status.php] .

 

In project_status.php] , I have included another file project_status_app.php which contains a HTML form.

 project_status.php:

<?php
 include 'inc_fn_header_and_menu.php';
function includeFile($file,$variable) {
    $var = $variable;
    include($file);
}
if (isset($_GET['id']) && $_GET['id']!="") {
    $pid    = $_GET['id'];
    $_SESSION['pidForApproval'] = $_GET['id'];
    $query = 'SELECT * FROM `profile` WHERE pid ='.'\''.$pid.'\'';
    $result=mysqli_query($db,$queryToRetrievePP) or die("There are no records to display ... \n" . mysqli_error());
    foreach ($result as $row) {
        $status = $row['status'];
    }        
}
...........some PHP and HTML code.......
	<div id="customerPurchaseApprovalForm">
<?php  
  echo '<p>APPROVAL FOR CUSTOMER PURCHASE</p>';
  $discountApprovalStatus = "Granted";
  if ($discountApprovalStatus == "Granted") {  
 
  includeFile("project_status_app.php",$highestannualvalue);
  } else {
     //.........
  }

In project_status_app.php I am attempting to retrieve pidForApproval from the $_SESSION array.

<?php
        // put your code here  UPDATE `pp` SET `customer_purchase_remarks` = 'hahaha' WHERE `pp`.`id` = 207;
        
        if ($_SERVER['REQUEST_METHOD'] == 'POST') {
            include '../../inc/fastlogin.php';      
            $sql = "UPDATE pp SET customer_purchase_remarks ='{$_POST['remarkstxt']}' WHERE pp.pid='{$_SESSION['pidForApproval']}'"; 
            $result = mysqli_query ( $fastdb, $sql ) ;
            if (mysqli_affected_rows($fastdb) != 1) { 
               $_SESSION['err_cpa_rmks'] = "<p>Error while updating WHERE id='{$_SESSION['pidForApproval']}'</p>";
                //echo "<p>Error while updating WHERE id='{$_POST['pidForApproval']}'</p>".mysqli_error($fastdb);                 
            } else { 
                $_SESSION['suc_cpa_rmks'] = "<p>Records was updated successfully.</p>";
                //echo "Records was updated successfully."; 
            }
            header ("location: project_status.php?id="$_SESSION['pidForApproval']);
            exit();
        }    
        
        ?>

When I load  project_status.php,  project_status_app.php is supposed to display the form. Once the user fills in the form the and the submit button has been pressed, the UPDATE statement is supposed to run and then it is supposed to navigate back to project_status.php?id=FA142. But the update is failing and the when the project_status.php is loaded back, the url looks like this http://localhost/fast/project_status.php?id= . The id is empty. It is supposed to be something like this http://localhost/fast/project_status.php?id=FA142. With the id being populated at the 

header ("location: project_status.php?id=".$_SESSION['pidForApproval']);

I suspected that my $_SESSION['pidForApproval'] is not being populated in project_status.php but I echoed back $_SESSION['pidForApproval'] in that file itself and I can see it is being populated. Hence, I suspect that the $_SESSION['pidForApproval'] is not being passed to project_status_app.php. I have already attempted to include session_start(); clause in project_status_app.php but that gives an error, stating that the session has already started, in inc_fn_header_and_menu.php. Can someone help me as to why the $_SESSION['pidForApproval'] is not being passed on to the project_status_app.php file. Thank you.

Edited August 9, 2020 by Robinson
Missing some information.

Hi,

I am a curious fellow just beginning to use PHP. I understand the basics of what the $_GET and $_POST superglobals do, and how we can use them to retrieve data after form submission. I also know that since $_GET and $_POST are just associate arrays, we can create our own values in both $_GET and $_POST by writing statements like $_POST['variable'] = "value".

I am wondering if it is at all possible to send data beyond form data by adding new key/value pairs into $_GET and $_POST. So for example, if I had a form that transferred username/password through Post, would it be possible for me to include further data by just saying $_POST['formtype'] = "house_insurance_form"?

Basically what I'm getting at is trying to physically add your own data to $_POST or $_GET that you could pull from the next page where the form redirects to. In other words, can I send data beyond form data using these superglobals? I know I can do this with $_SESSION, but could I do it through $_POST or $_GET? I haven't been able to accomplish this, and I was just wondering if someone could give me an in-depth explanation of how this might work or how this is not possible. I would really really really appreciate it.

Best Regards,
-Sky

Hi,

Firstly, I am a complete newcomer to PHP though I am enjoying my first tentative steps into learning the language!

I have been searching Google for hours now to try and find a simple solution to a problem I just can't seem to figure out, though I thought would be easy to find? I have found a lot of very informative solutions to other questions on this forum so figured it was the best one to join?

My question is: I have built and can interact with a simple database and now populate a page with usernames in a list. Each one is a link which, when clicked sends the username to another page. On this page I use the $_GET function and see the username displayed ok. What I can't figure out is how to then display other information about them from the fields in the database identified with that user?

Any help would be greatly appreciated as this is driving me nuts! Also can anyone suggest a good book for learning PHP? There are lots out there but the reviews on Amazon seem to always talk about coding errors in print etc. so I really don't know which one to buy?

FF

Hello everyone, I am working on a form that is similar to a shopping cart system and I am thinking of creating a button that submits the checked value and saves them to a $_SESSION variable. And also a link that links to a cart.html that takes the values of a $_SESSION variable. I am have trouble figuring what tag/attribute should I use in order to achieve that.   Right now my code attached below submits the checked values to cart.html directly. However I want my submit button to save the checked box to a $_SESSION variable and STAY on the same page. And then I will implement a <a> to link to the cart.php.   I researched a little bit about this subject and I know it's somewhat related to ajax/jquery. I just wanted to know more about it from you guys. I appreciate your attention for reading the post and Thanks!   Below is the form that I currently have:

<form name= "finalForm" method="POST" action="cart.php">
<input type="Submit" name="finalSelected"/>

<?php foreach($FinalName as $key => $item) {?>
<tr>
<td><input type="checkbox" name="fSelected[]" value="<?php echo htmlspecialchars($FinalID[$key])?>" />
<?php echo "$FinalID[$key] & $item";?>
</td>
</tr>
<?php } ;?>

Below is the code for cart.php

<?php
require ('connect_db.php');
if(isset($_POST['finalSelected']))
{
	if(!empty($_POST['fSelected']))
	{
		$chosen = $_POST['fSelected'];
		foreach ($chosen as $item)
			echo "aID selected: $item </br>";
		$delimit = implode(", ", $chosen);
		print_r($delimit);
	}

}
if(isset($delimit))
{
$cartSQL = "SELECT * from article where aID in ($delimit)";
$cartQuery = mysqli_query($dbc, $cartSQL) or die (mysqli_error($dbc));
while($row = mysqli_fetch_array($cartQuery, MYSQLI_BOTH))
{
	$aTitle[] = $row[ 'name' ];
}
}
?>

<table>
	
		<?php if(isset($delimit)) { 
		$c=0; foreach($aTitle as $item) {?>
		<tr>
		<td>
			<?php echo $aTitle[$c]; $c++;?>
		</td>
		</tr>
		<?php }}?>
</table>

A few months ago, and a good amount of time before that, I had people telling me to use isset() instead of performing to see if the variable is empty, such as: !$_GET['']

I know the differences in the function and what they do, but when could isset() be used in a situation where it's better/more efficient then: !$_GET['']

I do use isset(), though.

Hi i have made a login in system for a website iam trying to make. after you log  in im trying to display the members username via the $_session created in the check_login.php. but when i Echo or print_r the $_session all is get is  "welcome  array" its like its not passing any information via the $_session from page to page. here is my code thanks in advance.


Check_login.php
session_start();

// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=md5($_POST["mypassword"]);

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
$_SESSION["myusername"]==$myusername;
$_SESSION["mypassword"];

header("location:login_success.php");
}
else {
echo "Wrong Username or Password";
}

?>

login_success.php

<?
session_start();
if($_SESSION['myusername']="$myusername"){
header("location:main_login.php");
}

Echo "welcome" . $_SESSION['$myusername'];

?>

thanks

For the last few hours I have been pulling my hair out on a session not storing when I moved from local host to my vps.

I have been setting sessions like:


$_SESSION['mydata'] = $variable;


This works no problem on my wamp installation.

However to get it to work on my vps, I have to store them like this


$_SESSION[mydata] = $variable;


Can someone please explain to me why this is the case?

edited

PHP 5.3.3

I am trying to redirect a user (currently logged in) to a page where they are able to edit a posted comment.

To keep things secure I am using a forms hidden input value to pass the {postID} to a redirect page

Code: [Select]
<form name="post_edit" method="post" action="post-edit-redirect.php" >
<input type="hidden" name="local" id="local" value="<?php echo $row_rsPosts['postID']; ?>" />
<input type="image" src="../imgs/managepost.png" name="submit" />
</form>

On the redirect page (simplified below) I am setting the {postID} in a SESSION before redirecting to the user to the page to edit their post with the new $_SESSION val for {postID} set.

Code: [Select]
session_start();
$id = $_REQUEST['local'];
$_SESSION['postID']=$id;
header("Location: edit-post.php");

This is working fine in every browser except IE (some one please just put an end to it), where when the edit-post.php page is reached the $_SESSION['postID'] is empty.  If I regenerate the session ID from the redirect page as below IE then sets the SESSION ok.

Code: [Select]
session_start();
session_regenerate_id();
$id = $_REQUEST['local'];
$_SESSION['postID']=$id;
header("Location: edit-post.php");

However there should be no need to do this and would rather not if there is no need.

Any help on why IE is not setting the SESSION is appreciated, and I hope I am not covering old ground here however I am unable to find a solution anywhere. - Cheers

The $_Session has a url variable. Using a Dom how do I properly do:

Code: [Select]
html->load($_SESSION['variable'])

I was thinking about breaking down the session to retrieve the value inside but I don't know how.