PHP - Pull User Info From Mysql Db In Session

$result = mysqli_query($con,"SELECT * FROM $_SESSION['datakey']";

On the home page I am having a problem pulling information from the MySql here is my code...and this is what I am trying to do... i am trying to pull 10 items from the database that have today's date...I am also trying to make the user name a link to a page called backpack.php where that page can use the user name that is clicked to retrieve more information. (the problem I am having is 10 results come up but it is a repeat of the same 10 results and when you click the link it doesn't show the user that is clicked info.) PLEASE someone help I have been trying to figure this out for the longest time.

Code: [Select]
   <form action="backpack.php" method="post">
           
         <?php
         // rows to return
         $limit=10; 
         $idcount=10;
         $date = date('Y-m-d');
         $count = 0;
            
         
while ($limit>=$count)   
{
   //open database
            $connect = mysql_connect("hostname","uname","pass") or die("Not connected");
            mysql_select_db("db_name") or die("could not log in");
   
            $query = "SELECT *,COUNT(name) FROM boox WHERE date='$date' ORDER BY date";
            $idcount = $row['COUNT(name)'];
            $result = mysql_query($query);
            while($row = mysql_fetch_array($result))

         echo "</br><table width='297' height='200' border='1' align='center' style='overflow:scroll'>
  <tr>
    <td width='152'>Book Title:</td>
    <td width='129'>$row[name]</td>
  </tr>
  <tr>
    <td>Author:</td>
    <td>$row[author]</td>
  </tr>
    <tr>
    <td>ISBN#</td>
    <td>$row[isbn]</td>
  </tr>
  <tr>
    <td>Date Posted:</td>
    <td>$row[date]</td>
  </tr>
  <tr>
    <td>Posted By:</td>
    <td><a href='backpack.php' onclick='document['packback'].submit()'>$row[username]</a></td>
  </tr>
  <tr>
    <td>School:</td>
    <td>$row[school]</td>
  </tr>
</table></br>";   

$count = $count + 1;
$idcount = idcount + 1;
         }
         
         ?>
            </form>

MOD EDIT: DB credentials removed, [code] . . . [/code] tags added.

Hi Guys, I am fairly new to mySQL/PHP and I have an issue. I have a login/registration system for a website and it works. However in the registration the user enters info such as their phone and email. How can I access these two fields of info from the user who is currently logged in. For example someone makes an account with:
Username: Person
Password: hello
Email: person@gmail.com
Phone: 111-111-1111
Name: Hello Person

When they log into the site using their username and password, how can I detect their email/phone/name? Thanks in advance!

I don't know that the subject describes exactly what I want to do so I will explain it as best as I can.

I have a form that uses a select box to pull all the names of our employees from the database. I then have a submit button that opens up a page. The code from my view.php is as follows:

<form onsubmit="return validateForm()" name="frmRequest" action="attendance.php" method="post" encytype="multipart/form-data">
Which employee would you like? 
<select>
<?
@ $db = mysql_connect("localhost", "db_user", "db_pass");
mysql_select_db("EmployeeInfo");
$strSQL = "SELECT Name FROM EmployeeInfo ORDER BY Name";
$rs = mysql_query($strSQL);
$nr = mysql_num_rows($rs);
for ($i=0; $i<$nr; $i++) {
$r = mysql_fetch_array($rs);
echo "<OPTION VALUE=\"".$r["Name"]."\">".$r["Name"]."</OPTION>";
}
?>
</select>
<input type="submit" class="submit" value="Submit" />
</form>

On the attendance.php form, I need it to display that user that was pulled from the form on the page before. What would be the best way to do this? I am fairly new to PHP and i'm at a loss right now.

Thanks,
dmcdaniel

Hello, i've got some shop script which has 2 payment modules which i'd like to use for something else, the payment modules only work if the user is logged in though, i tried to make them standalone scripts but that didn't work out too well.

So now i decided to go another way and just let everyone have the same session so everyone will be using the same username&password automatically.

the index file looks like this:
Code: [Select]
<?php
include('./inc/config.php');
include('./inc/functions.php');
include('./lang/'.$language.'.lng');
$id = addslashes($_REQUEST["id"]);
$user = addslashes($_REQUEST["username"]);
$pass = addslashes($_REQUEST["password"]);
$language = strtolower($language);
if(empty($id)) $id =1;
$file = mysql_query('SELECT * FROM navi_'.$language.' WHERE id="'.$id.'"');
if(mysql_num_rows($file)>0)
$file = mysql_fetch_array($file);
else
$file = mysql_fetch_array(mysql_query('SELECT * FROM navi_'.$language.' WHERE id="404"'));

if(!empty($user) AND !empty($pass))
{$query = mysql_query('SELECT * FROM users WHERE username="'.$user.'" AND pass="'.md6($pass).'"');
if(mysql_num_rows($query) == 1) {$_SESSION[$session_prefix."user"] = ucfirst($user); echo'<meta http-equiv="refresh" content="0; url=index.php?id=8">';}
else $error = 'Username oder Passwort ist falsch.';}

include('./designe/'.$designe.'/head.tpl');
include('./designe/'.$designe.'/navi.php');
include('./designe/'.$designe.'/middle.tpl');

if(file_exists('./pages/'.$file["file"]))
{echo'<h1>'.ucfirst($file["title"]).'</h1>';
include('./pages/'.$file["file"]);}
if(!empty($error)) echo '<font color="red">'.$error.'</font>'; 

include('./designe/'.$designe.'/foot.tpl');
?>

Now i tried alot of things including adding:
Code: [Select]
session_start();
$_SESSION["username"] = "peter";
$_SESSION["user"] = "peter";
$_SESSION["id"] = "1";
$_SESSION["pass"] = "peter";
$_SESSION["password"] = "peter";
or
Code: [Select]
$id = "1";
$user = "peter";
$username = "peter";
$pass = "peter";
$password = "peter";
also a combination of both, nothing works, but i don't understand why ? Any help is appreciated.

/Edit, i tried adding it to the paymentmodule .php aswell, but no luck.

I'm trying to learn how to code the proper way.

There's a few things im worried about,but overall im worried about clogging up the server.  so what should i keep in mind while coding, to avoid this?

I'm thinking, keep insert and update to a minimum?  as in, when possible, use session to keep track of data until i absolutly have to add that data to a database? is that a correct thought?

what about once the data is in the database, how much trouble is it to ask for the selected data inside a database?  should i be worried about overdoing request of data from databases?   

on the other hand, should i be worried about having too many sessions travelling around with a user.  why?

Im just asking to get a better feel for how to do things the proper way, i would hate to have a website built, only to find out that what i built is only a bat, that would bash the hell out of a server i wanted to put it on.

I am ok with codeing but NOT half-as good as some of your GUYS here.
I'm trying to write a simple sql query based on returning certain values from a table for that user.

I would like to just beable to include this as a page user.info.php and render it on any page as include to return need values .

See My CODE. PLESE HELP ME.
Code: [Select]
<?php 

     @session_start();
 $user = $_SESSION['username'];

// Set cookie
$userid = JRequest::getVar('userid');

$data       = new stdClass();
$model      =& $this->getModel('profile');
$my         = CFactory::getUser();

// Test if userid is 0, check if the user is viewing its own profile.
$db =& JFactory::getDBO();
$user =& JFactory::getUser();
        $userId = $user->id;

// Return with empty data
if($userId == null || $userId == '')
{
//return false;
}

$user =& JFactory::getUser($userId);

if($user->id == null){
//return false;
}

$id = & JFactory::getUser($userId);
$query = 'SELECT user_id, id, format_id, year, name FROM #__muscol_albums WHERE user_id = ' . $id;
//$query = 'SELECT user_id FROM #__muscol_albums WHERE id = ' . $album_id ;
$result = mysql_query($query) or die('Error, No Album Search failed');
list($name, $user_id, $id, $year) = mysql_fetch_array($result);

 
echo $id;
echo $user_id;
echo $year;

 
 
    // preform id return check and redirecto to correct url
    if ($user->get('id') == 0 || $userid == 0 || $userid <> $user->get('id')){
 $url=JURI::root().'index.php?'.$component.'&id='.$id.'&amp;tmpl=component&amp;print=1';
} else {
    $url=JURI::root().'index.php?option=com_community&amp;view=profile&amp;id=1&amp;tmpl=component&amp;print=1'; //redirect      is a function 
 
}

?>

This topic has been moved to PHP Applications.

http://www.phpfreaks.com/forums/index.php?topic=327636.0

Hi - how's it going? I've been working on something with no luck and I'm wondering if you have any ideas. I have two tables; Members and Events. When a member logs in they are redirected to a page where I want them to be able to see a list of events that they have created based on a user ID that is common in both tables. So if the member has a memberID of 123 I want them to see any events that have the userID of 123. I used two different column names just for clarity. I've tried a number of variations on the following code:

<?php
session_start();
   header("Cache-control: private");
 
 
// Connect to Database
  include ('includes/db.php'); //Has login info
 
// If not logged in
  if (!$_SESSION['pkMemberID']) {
   
    echo ("<div class='box'><h2>Sorry, you are not logged in!</h2>");
    exit();
  }
     
// Convert Session variable 'pkMemberID' to simple variable.
$memberID = $_SESSION['memberID'];
$pkMemberID = $_SESSION['pkMemberID'];
$name = $_SESSION['name'];
   
 //Query Events
  $sql = "SELECT * FROM events WHERE userID = $memberID";
  $result = mysql_query($sql);
  $num_rows = mysql_num_rows($result);
 
  echo ("<div>Events:<br />");
  // Event exists
  if (!($num_rows == 0)) {
   $myrow = mysql_fetch_array($result);
   do {
     printf ('<span>&ndash; <a href="event_edit.php?pkEventID=%s">%s</a></span><br />', $myrow['pkEventID'], $myrow['eventName']);
   }
   while ($myrow = mysql_fetch_array($result));
 }
   echo ("</div>"); //End Events
      //end page
 
?>

Sometimes I get errors, sometimes just nothing. Any advice would be appreciated.

Hi,

I have a 'pre-release' sign up form, where people put in their email address and name, and it transmits to a MYSQL database. That's working fine. What I want to do is to have a piece of text that reads:

(insert pre release amount of signer upperers here) have signed up. Will you?

I'm guessing that the amount of rows on the table, would end up being the number. How do I do this?

Thanks,
Jack

Hi, All:

I'm trying to figure out what way it's the best way to pull info belonging to a specific user based on whether he's a logged-in "member", and want to make sure he's not able to access any other member's details... would the best way be to try to match the user's "username" stored in a $_SESSION when fetching his info, something like this:

Code: [Select]
<?php
// Assume the login combo is this:
$username = $_POST['username'];
$password = $_POST['password'];
// Assume he has already logged in:
$_SESSION['username'] = $username;

//EXAMPLE 1: SELECTING user info simply from actual DB username/password match:
if ($_SESSION['username'])
{
$userRecords  = mysql_query("SELECT * FROM users WHERE username = '$username'  AND password = '$password'");
$userInfo = mysql_fetch_array($userRecords);
echo $userInfo['id'] . $userInfo['username'] . $userInfo['first-name'] . $userInfo['last-name'] . $userInfo['date-register'];
}


// EXAMPLE 2: or  SELECTING user info based on $_SESSION['username'] value: 
if ($_SESSION['username'])
{
$userRecords  = mysql_query("SELECT * FROM users WHERE username = . $_SESSION['username'] .  AND password = '$password'");
$userInfo = mysql_fetch_array($userRecords);
echo $userInfo['id'] . $userInfo['username'] . $userInfo['first-name'] . $userInfo['last-name'] . $userInfo['date-register'];
}

?>

So, my question is, are this actually working differently? is one better than the other as far as security, preventing other users from hacking either on purpose or accidenally into other user's details?

thank! Appreciate any feedback...

I have two tables.

Table Name:Users

Fields:

User_name
user_email
user_level
pwd


2.Reference

Fields:

refid
username
origin
destination

user_name in the users table and the username field in reference fields are common fields.



There is user order form.whenever an user places an order, refid field in reference table will be updated.So the user will be
provided with an refid

Steps:

1.User needs to log in with a valid user id and pwd
2.Once logged in, there will be search, where the user will input the refid which has been provided to him during the time of order placement.
3.Now User is able to view all the details for any refid
3.Up to this we have completed.

Query:

Now we need to retrieve the details based on the user logged in.

For eg: user 'USER A' has been provided with the referenceid '1234' during the time of order placement
user 'USER B' has been provided with the referenceid '2468' during the time of order placement

When the userA login and enter the refid as '2468' he should not get any details.He should get details only for the reference ids which is assigned to him.

I am trying to build a form that will process all the user inputted information, and put those contents into an html table so that I can send the info to both my customer and myself.  I figured out how to send an email to myself as html, but the user email is arriving as plain text with all the html tags.  Someone had suggested PHPMailer, but I cannot figure out how to format it properly to work with my setup.  I am new to PHP so this is a learning curve.  I have included a sample of my process form with fictitious email addresses. Any help is much appreciated.  Thank you in advance for the help! 

Code: [Select]

<?php header("Location: ../contactthank.php"); 
?>

<?PHP
$field_Type = $_POST['field_Type'];
$field_Service_Provider = $_POST['field_Service_Provider'];
$field_Brand = $_POST['field_Brand'];
$field_Model = htmlspecialchars($_POST['field_Model']);
$field_Size = $_POST['field_Size'];
$field_Charger = $_POST['field_Charger'];
$field_Case = $_POST['field_Case'];
$field_Software = $_POST['field_Software'];
$field_Manual = $_POST['field_Manual'];
$field_Box = $_POST['field_Box'];
$field_Condition = $_POST['field_Condition'];
$field_FirstName = htmlspecialchars($_POST['field_FirstName']);
$field_LastName = htmlspecialchars($_POST['field_LastName']);
$field_Email = $_POST['field_Email'];
$field_ZipCode = (int)$_POST['field_ZipCode'];
$field_Comments = $_POST['field_Comments'];
?>

<?php $reference = (rand(100000000000,99999999999999)); 
echo $reference;
?>

<?php
$to = "email@mail.com";
$subject = "Submission# $reference";
$headers = 'From: $field_Email'  . "\r\n";
$message =  '<html>
<head>
  <title>Cell Phone Form Submission</title>
</head>
<body>
  <h1>Thank you for your submission. We will get back to you shortly</h1>
<table border="1">
  <tr>
    <td>Reference#</td>
    <td>' . $reference . '</td>
  </tr>
  <tr>
    <td>I want to</td>
    <td><b>Sell</b></td>
  </tr>
  <tr>
    <td>Service Provider</td>
    <td>' . $field_Service_Provider . '</td>
  </tr>
  <tr>
    <td>Model</td>
    <td>' . $field_Model . '</td>
  </tr>
  <tr>
    <td>Size</td>
    <td> ' . $field_Size . '</td>
  </tr>
  <tr>
    <td>Accessories</td>
    <td>' . $field_Charger . " " . $field_Case . " " . $field_Software . " " . $field_Manual . " " . $field_Box . '</td>
  </tr>
  <tr>
    <td>Condition</td>
    <td>' . $field_Condition . '</td>
  </tr>
  <tr>
    <td>Name</td>
    <td>' . $field_FirstName . " " . $field_LastName . '</td>
  </tr>
  <tr>
    <td>Email</td>
    <td>' . $field_Email . '</td>
  </tr>
  <tr>
    <td>Zip Code</td>
    <td>' . $field_ZipCode . '</td>
  </tr>
  <tr>
    <td>Comments</td>
    <td>' . $field_Comments . '</td>
  </tr>
</table></body>
</html>
';

$headers  = 'MIME-Version: 1.0' . "\r\n";
$headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
$user = "$field_Email";
$usersubject = "Form Submission# $reference";
$userheaders = "From: email@mail.com\n";
$usermessage =  '<html>
<head>
  <title>Form Submission</title>
</head>
<body>
  <h1>Thank you. We will get back to you shortly</h1>
<table border="1">
  <tr>
    <td>Reference#</td>
    <td>' . $reference . '</td>
  </tr>
  <tr>
    <td>I want to</td>
    <td><b>Sell</b></td>
  </tr>
  <tr>
    <td>Service Provider</td>
    <td>' . $field_Service_Provider . '</td>
  </tr>
  <tr>
    <td>Model</td>
    <td>' . $field_Model . '</td>
  </tr>
  <tr>
    <td>Size</td>
    <td> ' . $field_Size . '</td>
  </tr>
  <tr>
    <td>Accessories</td>
    <td>' . $field_Charger . " " . $field_Case . " " . $field_Software . " " . $field_Manual . " " . $field_Box . '</td>
  </tr>
  <tr>
    <td>Condition</td>
    <td>' . $field_Condition . '</td>
  </tr>
  <tr>
    <td>Name</td>
    <td>' . $field_FirstName . " " . $field_LastName . '</td>
  </tr>
  <tr>
    <td>Email</td>
    <td>' . $field_Email . '</td>
  </tr>
  <tr>
    <td>Zip Code</td>
    <td>' . $field_ZipCode . '</td>
  </tr>
  <tr>
    <td>Comments</td>
    <td>' . $field_Comments . '</td>
  </tr>
</table></body>
</html>
';

mail($to,$subject,$message,$headers);

mail($user,$usersubject,$usermessage,$userheaders,$headers);

?>

Hi,

I am getting frustrated beyond belief at the moment with trying to get a very simple script to run, I am using PHP 5.3.3 and MySQL 5.1 on a Win2k8 server with IIS7.5. Basically my script is connecting to a local database, running a single select query, returning those rows and building up a string from them.

The problem is that I am receiving complete BS responses from PHP that the access is denied for the user being specified. This is complete rubbish since the user can connect via mysql, sqlyog, ASP.NET MVC without issue but for some bizarre reason it is not working via PHP.

The code for the script is here :

Code: [Select]
<?php

$mysql = mysql_connect('127.0.0.1:3306', 'myuser', 'mypass', 'mydatabase');


if (!$mysql) {
  die(mysql_error());
  $content = "<nobr></nobr>";
} else {
  
  $result = mysql_query('SELECT * FROM tblEventGroup'); 
  $content = "<nobr>";
  
  if ($result) {     
      while($row = mysql_fetch_assoc($result)) {
       $content .= "<span>";
       $content .= $row['GroupName'];
       $content .= "</span>";
       $content .= "<a href=\"../Event/EventSearch?groupid=";
       $content .= $row['GroupId'];
       $content .= "\" target=\"_blank\">Book here</a> ";
      }
  }
  
  mysql_close($mysql);
  $content .= "</nobr>";

}

?>
I cannot for the life of me understand what the problem is, the return error is

Access denied for user 'myuser'@'localhost' (using password: YES)

Hi guys

I need to know how i can create a session for userid from my database, I have done the session for username but not being able to do it for user name, here is my code.

my database table is called users and I can login successfully, but i tried few code and it wont show the user id, the column for user id is 'id'

<?php

include 'global.php';

$session_username = $_SESSION['username'];


if ($_POST['login'])
{
   //get form data
   $username = addslashes(strip_tags($_POST['username']));
   $password = addslashes(strip_tags($_POST['password']));
   
   if (!$username||!$password)
      echo "Enter a username and password";
   else
   {
    //log in
    $login = mysql_query("SELECT * FROM users WHERE username='$username'");
    if (mysql_num_rows($login)==0)
       echo "No such user";
    else
    {
      while ($login_row = mysql_fetch_assoc($login))
      {
 
       //get database password
       $password_db = $login_row['password'];
 
       //encrypt form password
       $password = md5($password);
       
       //check password
       if ($password!=$password_db)
          echo "Incorrect password";
       else
       {
          //check if active
          $active = $login_row['active'];
          $email = $login_row['email'];
          
          if ($active==0)
             echo "You haven't activated your account, please check your email ($email)";
          else
        {
               $_SESSION['username']=$username;     //assign session
            
         header('Location:my.php');  
          }
       }
 
 
      }
    }
   }
}
else
{

  if (isset($session_username))
  {
   echo "You are logged in, $session_username., <a href='logout.php'>Log out</a>";
  }
  else
  {
   echo "
   <form action='index.php' method='POST'>
   Username:

   <input type='text' name='username'><p />
   Password:

   <input type='password' name='password'><p />
   <input type='submit' name='login' value='Log in'>
   </form>
   ";
  }

}

?>

thanks