PHP - Single Checkbox And $_session?

For the last few hours I have been pulling my hair out on a session not storing when I moved from local host to my vps.

I have been setting sessions like:


$_SESSION['mydata'] = $variable;


This works no problem on my wamp installation.

However to get it to work on my vps, I have to store them like this


$_SESSION[mydata] = $variable;


Can someone please explain to me why this is the case?

edited

The $_Session has a url variable. Using a Dom how do I properly do:

Code: [Select]
html->load($_SESSION['variable'])

I was thinking about breaking down the session to retrieve the value inside but I don't know how.


 

Hi i have made a login in system for a website iam trying to make. after you log  in im trying to display the members username via the $_session created in the check_login.php. but when i Echo or print_r the $_session all is get is  "welcome  array" its like its not passing any information via the $_session from page to page. here is my code thanks in advance.


Check_login.php
session_start();

// username and password sent from form
$myusername=$_POST['myusername'];
$mypassword=md5($_POST["mypassword"]);

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql="SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);
// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){
// Register $myusername, $mypassword and redirect to file "login_success.php"
$_SESSION["myusername"]==$myusername;
$_SESSION["mypassword"];

header("location:login_success.php");
}
else {
echo "Wrong Username or Password";
}

?>

login_success.php

<?
session_start();
if($_SESSION['myusername']="$myusername"){
header("location:main_login.php");
}

Echo "welcome" . $_SESSION['$myusername'];

?>

thanks

PHP 5.3.3

I am trying to redirect a user (currently logged in) to a page where they are able to edit a posted comment.

To keep things secure I am using a forms hidden input value to pass the {postID} to a redirect page

Code: [Select]
<form name="post_edit" method="post" action="post-edit-redirect.php" >
<input type="hidden" name="local" id="local" value="<?php echo $row_rsPosts['postID']; ?>" />
<input type="image" src="../imgs/managepost.png" name="submit" />
</form>

On the redirect page (simplified below) I am setting the {postID} in a SESSION before redirecting to the user to the page to edit their post with the new $_SESSION val for {postID} set.

Code: [Select]
session_start();
$id = $_REQUEST['local'];
$_SESSION['postID']=$id;
header("Location: edit-post.php");

This is working fine in every browser except IE (some one please just put an end to it), where when the edit-post.php page is reached the $_SESSION['postID'] is empty.  If I regenerate the session ID from the redirect page as below IE then sets the SESSION ok.

Code: [Select]
session_start();
session_regenerate_id();
$id = $_REQUEST['local'];
$_SESSION['postID']=$id;
header("Location: edit-post.php");

However there should be no need to do this and would rather not if there is no need.

Any help on why IE is not setting the SESSION is appreciated, and I hope I am not covering old ground here however I am unable to find a solution anywhere. - Cheers

Hey, i was reading some code and i find this:

if(stristr($_SESSION["s"]["user"]["asdasd"]),$someString)


How the double/triple [] in $_SESSION works ?

PS: I tryied to google it but it was kinda hard to search :X

Thanks.

I'm trying to make a link to an SQL database survive though page reloads, and it's not working. Connecting, I use this:

function link_to_converted_database()
{
 $link = mysqli_init();
 if (!$link)
  {
   die('mysqli_init failed');
  }
 if (!mysqli_options($link, MYSQLI_INIT_COMMAND, 'SET AUTOCOMMIT = 1'))
  {
   die('Setting MYSQLI_INIT_COMMAND failed');
  }
 if (!mysqli_options($link, MYSQLI_OPT_CONNECT_TIMEOUT, 50))
  {
   die('Setting MYSQLI_OPT_CONNECT_TIMEOUT failed');
  }
 if (!mysqli_real_connect($link, 'redacted', 'redacted', 'redacted'))
  {
   die('Connect Error (' . mysqli_connect_errno() . ') ' . mysqli_connect_error());
  }
 comment( ' Success... ' . mysqli_get_host_info($link) );

 if (mysqli_query($link,'USE conversion_database'))
  {
   comment("now using conversion_database.");
  }
 else
  {
   die('Conversion database unusable (' . mysqli_connect_errno() . ') ' . mysqli_connect_error());
  }
 $_SESSION['mysql_link']=$link;
 echo "<!--\n";
 var_dump($_SESSION['mysql_link']);
 echo "\n-->\n";
 return(true);
}

Subsequent SQL commands work fine using $_SESSION['mysql_link'], and the var_dump returns:

object(mysqli)#2 (17) {
  ["affected_rows"]=>
  int(0)
  ["client_info"]=>
  string(48) "mysqlnd 5.0.7-dev - 091210 - $Revision: 294543 $"
  ["client_version"]=>
  int(50007)
  ["connect_errno"]=>
  int(0)
  ["connect_error"]=>
  NULL
  ["errno"]=>
  int(0)
  ["error"]=>
  string(0) ""
  ["field_count"]=>
  int(0)
  ["host_info"]=>
  string(24) "192.168.1.101 via TCP/IP"
  ["info"]=>
  NULL
  ["insert_id"]=>
  int(0)
  ["server_info"]=>
  string(16) "5.1.48-community"
  ["server_version"]=>
  int(50148)
  ["sqlstate"]=>
  string(5) "00000"
  ["protocol_version"]=>
  int(10)
  ["thread_id"]=>
  int(194)
  ["warning_count"]=>
  int(0)
}

After a page changes, all my $_SESSION vars work fine except for  $_SESSION['mysql_link']. It's still there, but SQL queries bomb, and var_dump returns:

Warning: var_dump(): Property access is not allowed yet in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Property access is not allowed yet in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595

Warning: var_dump(): Couldn't fetch mysqli in C:\Program Files (x86)\Apache Software Foundation\Apache2.2\htdocs\voicereader\serverstate.php on line 595
object(mysqli)#1 (17) {
  ["affected_rows"]=>
  NULL
  ["client_info"]=>
  NULL
  ["client_version"]=>
  int(50007)
  ["connect_errno"]=>
  int(0)
  ["connect_error"]=>
  NULL
  ["errno"]=>
  NULL
  ["error"]=>
  NULL
  ["field_count"]=>
  NULL
  ["host_info"]=>
  NULL
  ["info"]=>
  NULL
  ["insert_id"]=>
  NULL
  ["server_info"]=>
  NULL
  ["server_version"]=>
  NULL
  ["sqlstate"]=>
  NULL
  ["protocol_version"]=>
  NULL
  ["thread_id"]=>
  NULL
  ["warning_count"]=>
  NULL
}


There's got to be a way to save my SQL linkages so that I don't have to reconnect to the SQL database every time I want to see if new data has arrived, but this doesn't seem to be it. My PHP version is PHP 5.3.2.0.

Thanks for any help.

Hiya, I'm quite new to php.
My script was working fine till I transferred to a new host. The login system doesn't seem to register the $_SESSION 'userid' variable, so the proper page won't load because it thinks I'm not logged in.
login.php - processes the login information
Code: [Select]
<?php
session_start();
include('functions.php');
connect();
// note: session_start needs to be on every document apart 
// from index.php, login.php and register.php

$username = protect($_POST['username']);
$password = protect($_POST['password']);
// the password and username from the inputs are stored in variables

if ($username&&$password) {
// if both the username and password variables are true
$query = mysql_query("SELECT * FROM users WHERE username='$username'");
$numrow = mysql_num_rows($query); 

if ($numrow!=0) {
// if $numrow does not equal nothing
while ($row = mysql_fetch_assoc($query)) {
$userid = $row['userid'];
$dbusername = $row['username'];
$dbpassword = $row['password'];
}
if ($username==$dbusername&&md5($password)==$dbpassword) {
// $password gets encrypted so it can be checked on the database password
$_SESSION['username'] = $username;
$_SESSION['userid'] = $userid;
// used for sessions knowing who is logged in
header("Location:main.php");
// redirects to main.php page after successful login
} else {
echo "Incorrect password";
}
} else {

?>
<html>
<head>
<title>University Crusade</title>
<link rel="stylesheet" href="css/style.css" type="text/css" media="screen">
<meta name="viewport" content="width=device-width, minimum-scale=1,maximum-scale=1, user-scalable=no">
</head>
<body>
<div id="wrapper">
<?php
die ("

That account doesn't exist...<br /><a href=\"index.php\">try again,</a>
&nbsp;<a href=\"register.php\">or register an account.</a>
");
}
} else {
die("Please enter a username and password");
}
?>
</div>
<div id="footer">

</div>
</body>
</html>

and the main.php - after login.php it takes the user here
Code: [Select]
<?php 
session_start();
include('functions.php');
connect();
?>
<html>
<head>
<title>University Crusade</title>
<link rel="stylesheet" href="css/new.css" type="text/css" media="screen">
<meta name="viewport" content="width=device-width, minimum-scale=1,maximum-scale=1, user-scalable=no">
</head>
<body>
<?php
if (isset($_SESSION['userid'])) {
include('safe.php');
?>
<ul id="tab-nav">
<li><a href="stats.php" id="tab-character">CHARACTER</a></li>
<li><a href="games.php" id="tab-games">GAMES</a></li>
<li><a href="account.php" id="tab-account">ACCOUNT</a></li>
</ul>
<div id="wrapper">
<h2 id="name">Hello,&nbsp;<?php echo $_SESSION['username'] ?>!</h2>
<p>
Welcome to UNIVERSITY CRUSADE the fantasy-themed pervasive web game!
</p>
<p>
To start playing, begin with clicking the "games" button at the top of
the screen, from there choose a challenge and follow the instructions
</p>
<p>
What are the other buttons for? Well, the "account" button (top-right)
is where you can change settings for your account - things like changing
your password, deleting your account etc. The "character" button (top-left)
when clicked takes you to your character, you can change your display picture,
view your statistics and battle other players.
</p>
<p>
More help with the game is available in the "account" section, this includes
a detailed game manual describing in-detail game concepts and information.
</p>
</div>
<div id="footer">
<a href="logout.php" class="button">log me out</a>
</div>
<?php
} else {
die ("
<div id=\"wrapper\">
<p>Opps! You don't seem to be logged in...</p>
<a class=\"button\" href=\"index.php\">login now</a><br />
<p>Don't have an account? No worries, just <a href=\"register.php\">register for one.</a></p>
</div>
");
}
?>
</body>
</html>
I appreciate any help, as I'm left scratching my head.

Hi i'm new to the forum and i'm wondering if anyone here could help me out with the problem i'm having. the script i have uses $_SESSION['userid'] = $users['id']; and i'm not exactly sure how to read that .. any information would be helpful. thanks in advance

// SESSION TEST
if ($_SESSION['username']) {
require_once("../mysql.php");
// Find Username from Session ID

// Find Username from ID
$finduser="SELECT username FROM users WHERE id='$_SESSION[username];'";
$finduserquery=mysql_query($finduser)or die(mysql_error());
$userfetch = mysql_fetch_array($finduserquery);
// Set Username Variable
$userfromid = $userfetch['username'];
echo "lol" . ucwords($userfromid);
} else {
}

Everytime I load this page more than once when logged in, it seems to turn the variable blank. Therefore making the user not be able to view other pages that use a session.
Help?
Thanks

I, for some unknown reason, decided to attempt to build my first social networking website for my senior project. I am sort of a dumb dumb when it comes to PHP. For what I am currently working on now I need to display "members" that go to the same "school" and start in the same "semester" according to whomever is currently logged in. I understand $_SESSION['userid'] = mysql_insert_id(); is tracking the current user, but how would I track other information attached to that current user. The "school" and "semester" are tracked within tables outside of the "user" table.

Any help at all would be awesome. If you need anymore information let me know.

Thanks a trizillion.

What types of data can the $_SESSION cookie store? Objects? Resources? And how are these stored in text form?

Just wanted to know if $_Session was a global thing or does php require cookies setup?   I assumed that I could do something like this:

PAGE: A.php
session_start();
$_Session['Cat'] = 'Meow';

// -----------------------

PAGE: B.php
if (isset($_Session['Cat']) && !empty($_Session['Cat'])){
echo $_Session['Cat'];
}
OUTPUT: Meow

// -----------------------
PAGE: C.php
if (isset($_Session['Cat']) && !empty($_Session['Cat'])){
echo $_Session['Cat'];
}

OUTPUT: Meow

I can't seem to get this to work.   Page: Handler.inc

	// ========================================================= Session Log in / out
	public function logon($username, $password){
		if ($username == "admin" && $password == "coffee"){
			
				session_start();
				$_SESSION['USER_STATUS'] = '1';
				
				echo 'IN SESSION LOGIN HANDLER';
				echo $_SESSION['UserLogged'];
			}
		}
		
	public function logout(){
				$_SESSION['USER_STATUS'] = '0';
				
				echo 'IN SESSION LOGOUT HANDLER';
				
				session_destroy();
				//session_unset();
		}

Page: index.php

if (!isset($_SESSION['USER_STATUS']) && empty($_SESSION['USER_STATUS']) || $_SESSION['USER_STATUS'] == 0){
		if (isset($_POST['username']) && !empty($_POST['username']) && isset($_POST['password']) && !empty($_POST['password'])){
			
			$username = $_POST['username'];
			$password = $_POST['password'];
			
			echo $handler->logon($username, $password); 
		
			}

<LOGIN FORM CODE>

}else{

		if (isset($_SESSION['USER_STATUS']) && !empty($_SESSION['USER_STATUS']) || $_SESSION['USER_STATUS'] == 1){
			echo 'Session name: '. $_SESSION['USER_STATUS'];
		}

	if (isset($_POST['btn_logout']) && !empty($_POST['btn_logout'])){

		$handler->logout();
		echo '<br />Logged out<br />';
		
		}

<LOGOUT FORM BUTTON CODE>

}

Could someone point me in the right direction please. It does not seem to hold its session.        

Hello all,

I have this at the top of my page to ensure that only logged in users can see the content
Code: [Select]
if(!isset($_SESSION['myusername'])){
header("Location:login.php");
exit;
} else {
$username = $_SESSION['myusername'];
}

This, of course is checked in the login form against a database and only stored in $_SESSION once it's verified...

Now, my question is -- how secure is this? For example, could someone have $_SESSION['myusername'] set from another webpage, then navigate to mine and be able to see the protected content?

Is there an equivalent to * (any) in a $_SESSION? Something like this:

foreach ($_SESSION['cart']['content'][*]['Large'] as $content) {