PHP - Session Basics

if anyone out there fancy's helping the needy please can you cast your eyes over my mess! and possibly help me find my way out of this maze? 

So im useing a third party form, and a third party php script.......... cant get them to work together .


form script :
[color=red//-------------------------------------------------[/color]
<form action="phpquote.php" method="post" id="reserve-form">
            <div class="box">
               <div class="left-top-corner">
                  <div class="right-top-corner">
                     <div class="border-top"></div>
                  </div>
               </div>
               <div class="border-left">
                  <div class="border-right">
                     <div class="xcontent">
                        <h5>Get an online quote for your journey</h5>
                        <p>please fill in all fields for your quote.</p>
                       
                           <fieldset>
                           <div class="field">
                             <label>Customer Information</label>
                              <input type="text" id="name" value="Name" onblur="if(this.value==''){this.value='Name'}" onfocus="if(this.value=='Name'){this.value=''}" />
                           </div>
                           <div>
                              <input type="text" id="number" value="Phone" onblur="if(this.value==''){this.value='Phone'}" onfocus="if(this.value=='Phone'){this.value=''}" />       
                              </div>
                           </fieldset>
                    <fieldset class="style1">
                           <div class="field">
                              <label>Travel  Date/ Time</label>
                              <select id="year">
                                 <option>2010</option>
                                 <option>2011</option>
                              </select>
                              <select class="sel-1" id="month">
                               <option>Jan</option>
                                 <option>Feb</option>
                                 <option>Mar</option>
                                 <option>Apr</option>
                                 <option>May</option>
                                 <option>Jun</option>
                                 <option>Jul</option>
                                 <option>Aug</option>
                                 <option>Oct</option>
                                 <option>Sep</option>
                                 <option>Nov</option>
                                 <option>Dec</option>
                              </select>
                              <select class="sel-2" id="date">
                               <option>1</option>
                                 <option>1</option>
<option>2</option>
<option>3</option>
<option>4</option>
<option>5</option>
<option>6</option>
<option>7</option>
<option>7</option>
<option>8</option>
<option>9</option>
<option>10</option>
<option>11</option>
<option>12</option>
<option>13</option>
<option>14</option>
<option>15</option>
<option>16</option>
<option>17</option>
<option>18</option>
<option>19</option>
<option>20</option>
<option>21</option>
<option>22</option>
<option>23</option>
<option>24</option>
<option>25</option>
<option>26</option>
<option>27</option>
<option>28</option>
<option>29</option>
<option>30</option>
<option>31</option>
                             </select>
                           </div>
                           <div class="field">
                              <select class="sel-2" id="time">
                                 <option>00</option>
<option>01</option>
<option>02</option>
<option>03</option>
<option>04</option>
<option>05</option>
<option>06</option>
<option>07</option>
<option>08</option>
<option>09</option>
<option>10</option>
<option>11</option>
<option>12</option>
<option>13</option>
<option>14</option>
<option>15</option>
<option>16</option>
<option>17</option>
<option>18</option>
<option>19</option>
<option>20</option>
<option>21</option>
<option>22</option>
                            <option>23</option></select>
                              <select class="sel-2" id="time">
                                <option>00</option>
<option>15</option>
<option>30</option>
<option>45</option>                              </select>
</div>
<div class="field">

                              <label>No. Passangers</label>
                              <select id="year">
                                 <option>01</option>
<option>02</option>
<option>03</option>
<option>04</option>
<option>05</option>
<option>06</option>
                              </select>
                       </div>
                           </fieldset>
                           
                           <fieldset class="style2">
                           <div class="field">
                              <label>Pickup Information</label>
                              <input type="text" id="where" value="Pickup Address" onblur="if(this.value==''){this.value='Pickup Address'}" onfocus="if(this.value=='Pickup Address'){this.value=''}" />
                           </div>
                           
                          <div>
                              <select id="where">
                                 <option>or Airport</option>
                                 <option>Stansted</option>
                                 <option>Gatwick</option>
                                 <option>Heathrow</option>
                                 <option>Luton</option>
                              </select>
                           </div>
                           </fieldset>
                           <fieldset class="style2 style3">
                           <div class="field">
                              <label>Drop-off Information</label>
                              <input type="text" id="to" value="Drop-off Address" onblur="if(this.value==''){this.value='Drop-off Address'}" onfocus="if(this.value=='Drop-off Address'){this.value=''}" />
                           </div>
                           <div>
                              <select id="to">
                                 <option>or Airport</option>
                                 <option>Stansted</option>
                                 <option>Gatwick</option>
                                 <option>Heathrow</option>
                                 <option>Luton</option>
                              </select>
                           </div>
                           </fieldset>
                       
                     </div>
                  </div>
               </div>
               <div class="left-bot-corner">
                  <div class="right-bot-corner">
                     <div class="border-bot"><a href="#" class="link2" onclick="document.getElementById('reserve-form').submit()"><em><b>Get Quote</b></em></a></div>
                  </div>
               </div>
            </div>
        </form>

//-----------------------------------------------------------------------------


php script

//-----------------------------------------------------------------------------
<?php
//--------------------------Set these paramaters--------------------------

// Subject of email sent to you.
$subject = 'Results from Contact form';

// Your email address. This is where the form information will be sent.
$emailadd = 'm.mcdade@hotmail.co.uk';

// Where to redirect after form is processed.
$url = 'http://www.mock.thetaxirank.co.uk/thankyou.html';

// Makes all fields required. If set to '1' no field can not be empty. If set to '0' any or all fields can be empty.
$req = '0';

// --------------------------Do not edit below this line--------------------------
$text = "Results from form:\n\n";
$space = ' ';
$line = '
';
foreach ($_POST as $key => $value)
{
if ($req == '1')
{
if ($value == '')
{echo "$key is empty";die;}
}
$j = strlen($key);
if ($j >= 20)
{echo "Name of form element $key cannot be longer than 20 characters";die;}
$j = 20 - $j;
for ($i = 1; $i <= $j; $i++)
{$space .= ' ';}
$value = str_replace('\n', "$line", $value);
$conc = "{$key}:$space{$value}$line";
$text .= $conc;
$space = ' ';
}
mail($emailadd, $subject, $text, 'From: '.$emailadd.'');
echo '<META HTTP-EQUIV=Refresh CONTENT="0; URL='.$url.'">';
?>
//-----------------------------------------------------------------------------


any advice will be appreciated..... thanks in advance to any kind souls !!! 

I am trying to create an index page which contains registration and login field
the problem that i get is on successful login a warning is displayed
session_start() [function.session-start]: Cannot send session cookie - headers already sent by (output started at C:\xampp\htdocs\Eventz.com\index.php:116) in C:\xampp\htdocs\Eventz.com\index.php on line 235

This is the login part of my index.php
this tag is inside an html table below the login form
I also have a registration form and its php code above the login form


Code: [Select]
<?php
if (isset($_REQUEST['pass']))
{
    $id=$_POST['id'];
    $pass=$_POST['pass'];

    $conn =mysql_connect("localhost","root","");
    if (!$conn)
    {
   die('Could not connect: ' . mysql_error());
    }
/*
checking connection....success!
*/
    $e=mysql_select_db('test', $conn);
    if(!$e)
    {
   die(''.mysql_error());
    }
    else
    {
   echo 'database selected successfully';
    }

    if (isset($_REQUEST['id'])  || (isset($_REQUEST['pass'])))
    {
        if($_REQUEST['id'] == "" || $_REQUEST['pass']=="")
        {
       echo "login fields cannot be empty";
        }
        else
        {
            $sql=mysql_query("Select email,password from login where email='$id' AND password='$pass'");
            $count=mysql_num_rows($sql);
            if($count==1) 

    /* $count checks if username and password are in same row */
            {   
                session_start();
                $_SESSION['id']=$id;
                echo "</br>Login Successful</br>";
            }
            else
            {
           echo "</br>invalid</br>";
           echo "please try to login again</br>";

            }
        
        }   
    }
}
?>


Any help or suggestion would be appreciated

I am having trouble resolving an error.

Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/s519970/public_html/header.php:27) in /home/s519970/public_html/admin/login.php on line 2

 What I can gather is I can't use "header (Location: 'admin.php')" after i've used session_start(). I have tried to replace the header (Location: 'admin.php') with this:

                echo "<script>document.location.href='admin.php'</script>";
      echo "<script>'Content-type: application/octet-stream'</script>";

I've been trying to read up on solutions but haven't been able to get it sorted. If anyone can offer some advice that would be greatly appreciated as im new to php.

Code: [Select]
<?php
  session_start();
  if(isset($_SESSION['user']))

                echo "<script>document.location.href='admin.php'</script>";
echo "<script>'Content-type: application/octet-stream'</script>";
?>

<div id="loginform">

<form action="dologin.php" method="post">
<table>
<tr>
<td><span>Username:</span></td>
<td><input type="text" name="username" /></td>
</tr>
<tr>
<td><span>Password:</span></td>
<td><input type="password" name="password" /></td>
</tr>
<tr>
<td colspan="2" align="right"><input type="submit" name="login" value="Login" /></td>
</tr>
</table>
</form>

</div>
I have tried using require_once('yourpage.php'); before my <head></head> tags in the header document where I've specified the html information but this doesn't seem to work. I've been advised to use ob_start("ob_gzhandler"); but I am not sure how to implement this.

Any advice is greatly appreciated!

in this page
 http://maximaart.com/newscp/
i have this problem
Code: [Select]
Warning: session_start() [function.session-start]: Cannot send session cache limiter - headers already sent (output started at /home/maximasy/public_html/newscp/index.php:1) in /home/maximasy/public_html/newscp/index.php on line 2

my source code is

<?php
session_start();
include_once("config.php"); 
include_once("functions.php");
$errorMessage = '';
if (isset($_POST['txtUserId']) && isset($_POST['txtPassword'])) {
if ($_POST['txtUserId'] === "$user" && $_POST['txtPassword'] === "$pass") {
// the user id and password match,
$_SESSION['basic_is_logged_in'] = true;
require("main.php");
exit;?>

hi everyone.

i'm wondering what the best way is to create a session variable and pass it to an iframe.
i need to do something along these lines, but it doesn't seem to pass the ID. Any hints on how i should accomplish this?

Code: [Select]
session_start();
  $_SESSION['ID']=$_GET['ID']; // id from previous page
$ID=session_id();

 <iframe src="iframepage.php?ID=<?php echo $ID; ?>" style="width:680px; height:200px;" noresize="noresize" frameborder="0" border="0" scrolling="Yes" allowtransparency="true" /> </iframe>

I'm making a simple login system with MySQL and PHP (very simple, I'm just starting with PHP). The MySQL portion is done, but I need to ensure only people who are logged in can see certain content.

To check if people are logged in, my website checks that they have the $_SESSION['user'] variable set. If it is set, then it lets them continue through the website, if not, it tells them to login. Is that enough security, or can people simply inject a session cookie into their browser to spoof that they are logged in?

My idea was to generate a session key cookie when they login (just a random string of letters and numbers) and store that in the database, then on every page, check to make sure their session key is the same thing that's in the database. Is this necessary? It seems expensive.

Just curious how other people feel about this.  I am working on an application where a lot of info is pulled from MySQL and needed on multiple pages.     Would it make more sense to...   1.  Pull all data ONCE and store it in SESSION variables to use on other pages    2.  Pull the data from the database on each new page that needs it   I assume the preferred method is #1, but maybe there is some downside to using SESSION variables "too much"?   Side question that's kind of related:  As far as URLs, is it preferable to have data stored in them (i.e. domain.com/somepage.php?somedata=something&otherdata=thisdata) or use SESSION variables to store that data so the URLs can stay general/clean (i.e. domain.com/somepage.php)?   Both are probably loaded questions but any possible insight would be appreciated.   Thanks! Greg
Edited by galvin, 04 November 2014 - 10:30 AM.

Evening!

I've been iffing and ahhing over this and well im not too sure, hence the post.

Code: [Select]
// Redirects if there is no session id selected and echos the error on the previous page
if(!isset($_GET['get']) || ($_GET['getget'])){
header("Location: #.php?error");
}
So it should simply check if get is set if it isnt then see if getget is set?

If not redirect and show the error.

Now ive tried it and even when get/getget is set it still redirects, probably something silly. Care to share anyone?

Harry.

hello all,

What I want to do is, make the session ID clickable in a url here

Code: [Select]
Login Successful <a href="user.php">Conitnue</a>

so when a user logs in, his ID gets in the link of Continue so he can only see his information

so for example, if his id is 10, then the url would be ....user.php?id=10

If i use session in my php code then for how much time the session will be valid...

And how can i change the length of the session...

I am building an app (PHP and MySQL)and I had been using a lot of GET calls to get info from URLs, but the more I thought about it, the more I didn't like the possibility of people being able to mess with the URLs.  So I am in the process of changing everything to use SESSION variables to store data across pages, rather than GET.   The way I see it, SESSION variables are completely behind the scenes so they seem to be the better option.  Am I right, or is GET better than SESSION for some reason?

Hello everyone

I have the following code

$num = 1;
$query = mysql_query("SELECT * FROM people");
while($row = mysql_fetch_array($query))
{
$nums = $num++;
$_SESSION['equal'.$nums.''] = $row['name'];
$_SESSION['total'.$nums.''] = $row['age'];
}

which basically returns me SESSION names by increasing by 1, so it could produce the following session names

Code: [Select]
equal1
total1
equal2
total2
equal3
total3
equal4
total4
instead of setting those as sessions, I simply want to set them as vars, so instead of

$_SESSION['equal'.$nums.''] = $row['name'];
$_SESSION['total'.$nums.''] = $row['age'];

it would look like

$equal.$nums = $row['name'];
$total.$nums = $row['age'];

I have tried

$equal.$nums = $row['name'];
$total.$nums = $row['age'];

but it doesn't seem to work

any ideas?

thanks

I am trying to get sessions to work right
Here are my settings:
session.gc_maxlifetime = 60
session.gc_probability = 1
session.gc_divisor = 1
session.cookie_lifetime = 0  (when browser closes)

So say I have two php files:
php1.php

session_start();
$_SESSION['var1'] = 'var1';


php2.php

session_start();
echo $_SESSION['var1']. '<br>';


So if I go to php1 it will set the variable and then I can go to php2 and it will echo the variable.  This works.  But if I don't do anything and then go back to php2 after 60 seconds the variable should no longer exist.  This part is not working.  What do I need to change to get it to work?

Hi,
I am trying to get the value of a session veriable and if the variable contains a certain word it will show an error message, else just continue as normal.


if (isset($_POST['selectroom']))
{$_SESSION['room'] = $_POST['selectroom'];}
if (!isset($_SESSION['room']))
$room = "RoomNameA";
else
$room = $_SESSION['room'];


Please Advise,
 - Stuart

Hi,
I have a PHP page that includes this JS:

Code: [Select]
<script type="text/javascript">
AC_FL_RunContent( 'codebase','http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,28,0','width','465','height','80','class','FlashBorder','src','img/skype_banner_eng','quality','high','pluginspage','http://www.adobe.com/shockwave/download/download.cgi?P1_Prod_Version=ShockwaveFlash','movie','img/skype_banner_eng' ); //end AC code
                            </script>
skype_banner_eng is a flash movie in English. I need to get this movie to change to a different languagdepending on the language variable loaded. I have done this with jpg images by doing this:

Code: [Select]
header_<?php echo ($_SESSION['session_idioma']);?>.jpg
but whenI try to do the same within the JS it doesn't work....any ideas ?

Thanks