PHP - Creating A Session And Sending It Thru

I am trying to create an index page which contains registration and login field
the problem that i get is on successful login a warning is displayed
session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at C:\xampp\htdocs\Eventz.com\index.php:116) in C:\xampp\htdocs\Eventz.com\index.php on line 235

This is the login part of my index.php
this tag is inside an html table below the login form
I also have a registration form and its php code above the login form


Code: [Select]
<?php
if (isset($_REQUEST['pass']))
{
    $id=$_POST['id'];
    $pass=$_POST['pass'];

    $conn =mysql_connect("localhost","root","");
    if (!$conn)
    {
   die('Could not connect: ' . mysql_error());
    }
/*
checking connection....success!
*/
    $e=mysql_select_db('test', $conn);
    if(!$e)
    {
   die(''.mysql_error());
    }
    else
    {
   echo 'database selected successfully';
    }

    if (isset($_REQUEST['id'])  || (isset($_REQUEST['pass'])))
    {
        if($_REQUEST['id'] == "" || $_REQUEST['pass']=="")
        {
       echo "login fields cannot be empty";
        }
        else
        {
            $sql=mysql_query("Select email,password from login where email='$id' AND password='$pass'");
            $count=mysql_num_rows($sql);
            if($count==1) 

    /* $count checks if username and password are in same row */
            {   
                session_start();
                $_SESSION['id']=$id;
                echo "</br>Login Successful</br>";
            }
            else
            {
           echo "</br>invalid</br>";
           echo "please try to login again</br>";

            }
        
        }   
    }
}
?>


Any help or suggestion would be appreciated

in this page
 http://maximaart.com/newscp/
i have this problem
Code: [Select]
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/maximasy/public_html/newscp/index.php:1) in /home/maximasy/public_html/newscp/index.php on line 2

my source code is

<?php
session_start();
include_once("config.php"); 
include_once("functions.php");
$errorMessage = '';
if (isset($_POST['txtUserId']) && isset($_POST['txtPassword'])) {
if ($_POST['txtUserId'] === "$user" && $_POST['txtPassword'] === "$pass") {
// the user id and password match,
$_SESSION['basic_is_logged_in'] = true;
require("main.php");
exit;?>

hi everyone.

i'm wondering what the best way is to create a session variable and pass it to an iframe.
i need to do something along these lines, but it doesn't seem to pass the ID. Any hints on how i should accomplish this?

Code: [Select]
session_start();
  $_SESSION['ID']=$_GET['ID']; // id from previous page
$ID=session_id();

 <iframe src="iframepage.php?ID=<?php echo $ID; ?>" style="width:680px; height:200px;" noresize="noresize" frameborder="0" border="0" scrolling="Yes" allowtransparency="true" /> </iframe>

I'm making a simple login system with MySQL and PHP (very simple, I'm just starting with PHP). The MySQL portion is done, but I need to ensure only people who are logged in can see certain content.

To check if people are logged in, my website checks that they have the $_SESSION['user'] variable set. If it is set, then it lets them continue through the website, if not, it tells them to login. Is that enough security, or can people simply inject a session cookie into their browser to spoof that they are logged in?

My idea was to generate a session key cookie when they login (just a random string of letters and numbers) and store that in the database, then on every page, check to make sure their session key is the same thing that's in the database. Is this necessary? It seems expensive.

Just curious how other people feel about this.  I am working on an application where a lot of info is pulled from MySQL and needed on multiple pages.     Would it make more sense to...   1.  Pull all data ONCE and store it in SESSION variables to use on other pages    2.  Pull the data from the database on each new page that needs it   I assume the preferred method is #1, but maybe there is some downside to using SESSION variables "too much"?   Side question that's kind of related:  As far as URLs, is it preferable to have data stored in them (i.e. domain.com/somepage.php?somedata=something&otherdata=thisdata) or use SESSION variables to store that data so the URLs can stay general/clean (i.e. domain.com/somepage.php)?   Both are probably loaded questions but any possible insight would be appreciated.   Thanks! Greg
Edited by galvin, 04 November 2014 - 10:30 AM.

Evening!

I've been iffing and ahhing over this and well im not too sure, hence the post.

Code: [Select]
// Redirects if there is no session id selected and echos the error on the previous page
if(!isset($_GET['get']) || ($_GET['getget'])){
header("Location: #.php?error");
}
So it should simply check if get is set if it isnt then see if getget is set?

If not redirect and show the error.

Now ive tried it and even when get/getget is set it still redirects, probably something silly. Care to share anyone?

Harry.

Hi,

I hope it is possible to establish, what I am going to ask Currently I am using a site where I am entering a xml code, that is sent to certain workflow. That workflow returns me a few csv files within the same http session. So simply, there is a page with the TEXTAREA - where i enter xml code and subsequently I click on the Submit button. After that the new page is opened where I have links to csv files. I wonder if would be possible to establish that using php code. I would like to run everything in background, sending xml code to that workflow and get those files. Everything without opening that site, entering xml code, submitin that ,and clicking on each link to download those files. I am not looking for exact answer. Just if you can tell me where I can start. My php knowledge is not great, but I have written a few things so far. So if you can help where to start, I would be more than happy

Thanks

Hi,
I want to send an email to my registered users so that when they click on the URL given in the message hey should come back to my site as confirmetion of their registration. I am able to send the mail but the mail body is not coming as expected. Here's my code
Code: [Select]
<?php
   public function email($id){
        //get users info
       $this->userInfo = $this->model->listUser($id);
       $this->sendEmail($this->userInfo);
    }
    public function sendEmail($data){
       
        $to =$data['email'];
        
        
        $this->msg ="<img src=\"ideas.kpjit.com/public/images/header-img.jpg\" />

          <h1>KPJ Idea</h1>
          <p>Make a difference</p>
                <p>This is a Confirmation Mail.Please confirm your registration
            by clicking here <a href=\"http://ideas.kpjit.com\register\confirm\
                    <?php echo $this->data['id'];?></p>\" ";
       
        $subject = "Registration confirmation";
        $message = $this->msg;
        $from ="narjisfatima@yahoo.com";
        $headers  = 'MIME-Version: 1.0' . "\r\n";
        $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
        $headers = 'MIME-Version: 1.0' . "\r\n"; $headers .= 'Content-type: text/html; charset=iso-8859-1' . "\r\n";
        $headers .= 'From:narjisfatima@yahoo.com' . "\r\n";
        if(mail($to,$subject,$headers)){
     
        $this->render2("register/message");
        exit;
        }
    }

Also I am unable to insert my site banner in the mail. How can I do It.

Hi guys,

I am using following code for sending out confirmation email after successful transaction to the user. But, I users are not getting any confirmation emails. Can somebody help me out here. May be I am doing wrong in "$to" function as $sender_email is at previous form, So how can I use Session here? If I am wrong here?
Any someone help? Many Thanks in advance.

$to = "$sender_email";
$subject = "Your Transaction";

$headers = "From: Company <company@abc.com>\n";
$headers .= "Reply-To: Company <company@abc.com>\n";
$headers .= "MIME-Version: 1.0\n";
$headers .= "Content-Type: multipart/alternative; boundary=\"$mime_boundary\"\n";
$message = "Dear ".$rs["sender_name"].", ".$_email_nl.$_email_nl;
$message .= "Your paid amount ".$amount." ".$rs["currency"]." has been added to desired account.".$_email_nl.$_email_nl;
$message .= "Regards,";
$message .= "my company";
mail($to, $subject, $message, $headers);

Can someone help me understand why an email isn't being sent after clicking submit?

Code: [Select]
<?php
error_reporting(E_ALL);
?>   
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Untitled Document</title>

</head>
<body>
<?php
extract ($_POST);
if(!isset($submit))
{
?>
<form action=" " method="post" name="test">   
Name: <input name="name " type="text" id="name " size="8" /><br />
phone <input name="phone" type="text" size="13" /><br />
email <input name="email" type="text" size="9" maxlength="30" /><br />
<input name="submit" type="submit" value="submit" /> 
</form>
<?php
$Recipient = "$email"; 
$MsgSubject = "message subject"; 
$MsgHeader = "From Auntie Vic's Treatery <auntievics@gmail.com>\r\n"; 
$MsgBody = "message body."; 
mail($Recipient, $MsgSubject, $MsgBody, $MsgHeader); 
}
else 
{
echo " thank you for your order.  It is being processed.  Thank you for your business.";
}
?>   


</body>
</html>

I need some help over here.

I want to send an email to my friends by checking the database and extract the id.
After extracting the id from the database, i want to include a URL with the id.
E.g.
www.abc.php?35 (35 is the id)
www.abc.php?40 (40 is the id)

May I know how to send an email with multiple url?
Is it using a for loop in the php email function?

Your help is greatly appreciated.

Hi   I am trying to use mail(), but when I try it i am not receiving the email.  Code is as follows  

$username=$_POST['username'];
$email=$_POST['email'];
$password=$_POST['password'];
//email user
$from='registrations@ispeedwayscores.com';
$to=$email;
$subject='Thank you for registering at iSpeedwayScores';
 $message ='<html> 
  <body bgcolor="#000000" style="color:#FF9900; font:Verdana, Arial, Helvetica, sans-serif"> 
    <center> 
    
        <h1>Welcome to iSpeedwayScores</h1> <br/> 
        <p>Hi!</p> <br> 
        <p>Thank you for joining iSpeedwayScores, this is your <b>FREE</b> online speedway scorecard site.</p>
<p>Your login details are provided below:</p>
    Username: '.$username.'<br/>
Password: '.$password.'<br/> 
      <p>We hope you enjoy using the site, if you do, please tell others, if not please tell us</p>
 
 <h3>iSpeedwayScores</h3>
  </body> 
</html>'; 
   //end of message 
    $headers  = "From: $from\r\n"; 
    $headers .= "Content-type: text/html\r\n"; 
 
    //options to send to cc+bcc  
    $headers .= "Bcc: mark@bravo14.co.uk"; 
 
    // now lets send the email. 
    if(mail($to, $subject, $message, $headers)){
$message=" Message sent successfully";
$regsuccess = "Message sent successfully";
}
else{
$message=" Message not sent";
$regfailure ="Message not sent";
}

<?php
$site_email = $row["example@madhost.co"];
$email25=$_REQUEST['email'];
$action=$_REQUEST['action'];
if ($action=="")    /* display the contact form */
    {
    ?>
          <form id="ContactForm" action="" method="POST" enctype="multipart/form-data">
           <input type="hidden" name="action" value="submit">
            <div>
              <div class="wrapper"> <span>Your Name:</span>
                <input type="text" class="input" name="name" maxlenght="15">
              </div>
              <div class="wrapper"> <span>Your E-mail:</span>
                <input type="text" class="input" name="email" >
              </div>
              <div class="textarea_box"> <span>Your Message:</span>
                <textarea name="textarea" cols="1" rows="1"></textarea>
              </div>
              <input type="submit" class="button1"> <a href="contact.php" class="button1">Clear</a> </div>
          </form>
           <?php
    } 
else                /* send the submitted data */
    {
    $name=$_REQUEST['name'];
    $email=$_REQUEST['email'];
    $message=$_REQUEST['textarea'];
    if (($name=="")||($email=="")||($message==""))
        {
        echo "All fields are required, please fill <a href=\"\">the form</a> again.";
        }
    else{        
        $from="From: $name<$email>\r\nReturn-path: $email";
        $subject= $subject1;
        mail($to =$site_email, $message, $from);
        echo "
        <div class=\"contactform\">
        Thank you for contacting us, please wait for our reply!
        </div>
        ";
        }
    }  
?> 

The only problem is that im not recieving the email :/ Any Help ? I would really appreciate it and thank you  

this is a forgot password page and this email script will not send
Code: [Select]
<?php
$emailcut = substr($email, 0, 4); // Takes first four characters from the user email address
$randNum = rand(); 
                $tempPass = "$emailcut$randNum"; 
$hashTempPass = md5($tempPass);

                @mysql_query("UPDATE myMembers SET password='$hashTempPass' where email='$email'") or die("cannot set your new password");

                include('Mail.php');
        include('Mail/mime.php');
 
        // Constructing the email
        $sender = "Social network";                                            // Your email address
        $recipient = "$email";                               // The Recipients name and email address
        $subject = "Reset Your Password";                                                // Subject for the email
        $text = 'This is a text message.';                                      // Text version of the email
        $html = "<html><body><div align=center><br>----------------------------- New Login Password --------------------------------<br><br><br>
                Your New Password for our site is: <font color=\"#006600\"><u>$tempPass</u></font><br><br />
</div></body></html>";      // HTML version of the email
        $crlf = "\n";
        $headers = array(
                        'From'          => $sender,
                        'Return-Path'   => $sender,
                        'Subject'       => $subject
                        );
 
        // Creating the Mime message
        $mime = new Mail_mime($crlf);
 
        // Setting the body of the email
        $mime->setTXTBody($text);
        $mime->setHTMLBody($html);
 
        // Add an attachment
        
 
        // Set body and headers ready for base mail class
        $body = $mime->get();
        $headers = $mime->headers($headers);
 
        // SMTP authentication params
        $smtp_params["host"]     = "smtp.gmail.com";
        $smtp_params["port"]     = "587";
        $smtp_params["auth"]     = true;
        $smtp_params["username"] = "activate.social@gmail.com";
        $smtp_params["password"] = "pass";
 
        // Sending the email using smtp
        $mail =& Mail::factory("smtp", $smtp_params);
        $result = $mail->send($recipient, $headers, $body);

 if (PEAR::isError($mail)) {
   $outputForUser = '<font color="#FF0000">Password Not Sent.<br /><br />
                                                                  Please Contact Us...</font>';
  } else {
  $outputForUser = "<font color=\"#006600\"><strong>Your New Login password has been emailed to you.</strong></font>";
  }
 


     }

} else  {
 
   $outputForUser = 'Enter your email address into the field below.';

}



?>