Ad:

PHP Discussion Thread
Marked Solved
Views: 5161

Page 1
2
Next

You are currently viewing page 1 of this multi-page discussion thread

Aug 13th, 2008

Echo MySQL Row Data

Expand Post »

Hi All:

I have an extensive website in which I would like to echo the name of the company various pages after the user logs in. I think I should be using the $_SESSION global, but I'm having difficulty implementing it, placing it in my code, and knowing what php code to place in the pages where I want the company name to appear. From what I understand, I need to fetch the company name and assign it to the session while the user name and password are being authenticated.

For purposes of this question, the MySQL table is laid out as follows:

(Toggle Plain Text)

id
username
password
usergroup (not being used yet)
company
last_login

Here's my check-login code:

(Toggle Plain Text)

<?php

  $host = "---";
  $username = "---";
  $password = "---";
  $db = "---";
  $tbl_name = "---";

// Connect to server and select database.
mysql_connect($host, $username, $password) or die("Unable to connect to database.");
mysql_select_db($db) or die("Unable to connect to database.");


// Username and password sent from form.
$myusername = mysql_real_escape_string($_POST['myusername']);
$mypassword = mysql_real_escape_string($_POST['mypassword']);


$sql = "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result = mysql_query($sql);

// Mysql_num_row is counting table row
$count = mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row
  if($count==1) {

// Register $myusername, $mypassword and redirect to file "login_success.php"
  session_register("myusername");
  session_register("mypassword");

// Update the last_login field of the MySQL database
$lastlogin = mysql_query("UPDATE $tbl_name SET last_login=now() WHERE username='$myusername'");

// Redirect good login attempt
  header("location:login_success.php");
  }

// Redirect bad login attempt
  else {
    header("location:login_retry.php");
    }
?>

Similar Threads

Clean Previous Next Script for MySQL results in PHP
Apache in Linux Servers and Apache
configure PHP to work with Mysql in MySQL
help in mysql in PHP
Displaying images from mysql database in PHP

gpdrums

Reputation Points: 10

Solved Threads: 0

Light Poster

Offline

36 posts
since Sep 2007

Permalink

Aug 13th, 2008

Re: Echo MySQL Row Data

If you'd like to do it in a session variable, do this.

PHP Syntax (Toggle Plain Text)
<?php
 
  $host = "---";
  $username = "---";
  $password = "---";
  $db = "---";
  $tbl_name = "---";
 
// Connect to server and select database.
mysql_connect($host, $username, $password) or die("Unable to connect to database.");
mysql_select_db($db) or die("Unable to connect to database.");
 
// If no magic quotes, add slashes
if(!get_magic_quotes_gpc()) {
$myusername = addslashes($_POST['myusername']);
$mypassword = addslashes($_POST['mypassword']);
}
 
// Username and password sent from form.
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
 
 
$sql = "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result = mysql_query($sql);
$row = mysql_fetch_assoc($result);
 
// Mysql_num_row is counting table row
$count = mysql_num_rows($result);
 
// If result matched $myusername and $mypassword, table row must be 1 row
  if($count==1) {
 
// Register $myusername, $mypassword and redirect to file "login_success.php"
  session_register("myusername");
  session_register("mypassword");
  session_register("mycompany");
 
// Assign the mycompany variable from user table
  $_SESSION['mycompany'] = $row['company'];
 
// Update the last_login field of the MySQL database
$lastlogin = mysql_query("UPDATE $tbl_name SET last_login=now() WHERE username='$myusername'");
 
// Redirect good login attempt
  header("location:login_success.php");
  }
 
// Redirect bad login attempt
  else {
    header("location:login_retry.php");
    }
?>
<?php

  $host = "---";
  $username = "---";
  $password = "---";
  $db = "---";
  $tbl_name = "---";

// Connect to server and select database.
mysql_connect($host, $username, $password) or die("Unable to connect to database.");
mysql_select_db($db) or die("Unable to connect to database.");

// If no magic quotes, add slashes
if(!get_magic_quotes_gpc()) {
$myusername = addslashes($_POST['myusername']);
$mypassword = addslashes($_POST['mypassword']);
}

// Username and password sent from form.
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);


$sql = "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result = mysql_query($sql);
$row = mysql_fetch_assoc($result);

// Mysql_num_row is counting table row
$count = mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row
  if($count==1) {

// Register $myusername, $mypassword and redirect to file "login_success.php"
  session_register("myusername");
  session_register("mypassword");
  session_register("mycompany");
  
// Assign the mycompany variable from user table
  $_SESSION['mycompany'] = $row['company'];

// Update the last_login field of the MySQL database
$lastlogin = mysql_query("UPDATE $tbl_name SET last_login=now() WHERE username='$myusername'");

// Redirect good login attempt
  header("location:login_success.php");
  }

// Redirect bad login attempt
  else {
    header("location:login_retry.php");
    }
?>

I'm not completely certain you need to register the username and password with the session, but I may be wrong. It's be a while since I wrote my own session handler.

Oh, and if magic_quotes_gpc is enabled, you should use stripslashes() on the submitted form data and visa versa.

Last edited by MVied; Aug 13th, 2008 at 6:43 pm.

MVied

Reputation Points: 21

Solved Threads: 11

Junior Poster

Offline

111 posts
since Aug 2008

Permalink

Aug 13th, 2008

Re: Echo MySQL Row Data

Also, you shouldn't be using session_register() as this is registering a global variable. You will find that in most hosts, register globals is turned off and in php 6.0 it is completely removed. You shouldn't be using register globals anyway. You only need to use $_SESSION[].

So, unless you really feel like revisiting everything you've done with sessions, I recommend not doing this.

Last edited by R0bb0b; Aug 13th, 2008 at 7:24 pm.

R0bb0b

Reputation Points: 358

Solved Threads: 89

Posting Shark

Offline

986 posts
since Jun 2008

Permalink

Aug 13th, 2008

Re: Echo MySQL Row Data

Click to Expand / Collapse Quote originally posted by R0bb0b ...

Also, you shouldn't be using session_register() as this is registering a global variable. You will find that in most hosts, register globals is turned off and in php 6.0 it is completely removed. You shouldn't be using register globals anyway. You only need to use $_SESSION[].

So, unless you really feel like revisiting everything you've done with sessions, I recommend not doing this.

Ah see, news to me R0b. I haven't messed with session in forever. So maybe this is what he should use.

PHP Syntax (Toggle Plain Text)
<?php
 
  $host = "---";
  $username = "---";
  $password = "---";
  $db = "---";
  $tbl_name = "---";
 
// Connect to server and select database.
mysql_connect($host, $username, $password) or die("Unable to connect to database.");
mysql_select_db($db) or die("Unable to connect to database.");
 
// If no magic quotes, add slashes
if(!get_magic_quotes_gpc()) {
$myusername = addslashes($_POST['myusername']);
$mypassword = addslashes($_POST['mypassword']);
}
 
// Username and password sent from form.
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);
 
 
$sql = "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result = mysql_query($sql);
$row = mysql_fetch_assoc($result);
 
// Mysql_num_row is counting table row
$count = mysql_num_rows($result);
 
// If result matched $myusername and $mypassword, table row must be 1 row
  if($count==1) {
 
// Assign session variables from user table
 $_SESSION['mycompany'] = $row['company'];
 $_SESSION['myusername'] = $row['username'];
 
// Update the last_login field of the MySQL database
$lastlogin = mysql_query("UPDATE $tbl_name SET last_login=now() WHERE username='$myusername'");
 
// Redirect good login attempt
  header("location:login_success.php");
  }
 
// Redirect bad login attempt
  else {
    header("location:login_retry.php");
    }
?>
<?php

  $host = "---";
  $username = "---";
  $password = "---";
  $db = "---";
  $tbl_name = "---";

// Connect to server and select database.
mysql_connect($host, $username, $password) or die("Unable to connect to database.");
mysql_select_db($db) or die("Unable to connect to database.");

// If no magic quotes, add slashes
if(!get_magic_quotes_gpc()) {
$myusername = addslashes($_POST['myusername']);
$mypassword = addslashes($_POST['mypassword']);
}

// Username and password sent from form.
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);


$sql = "SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'";
$result = mysql_query($sql);
$row = mysql_fetch_assoc($result);

// Mysql_num_row is counting table row
$count = mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row
  if($count==1) {

// Assign session variables from user table
 $_SESSION['mycompany'] = $row['company'];
 $_SESSION['myusername'] = $row['username'];

// Update the last_login field of the MySQL database
$lastlogin = mysql_query("UPDATE $tbl_name SET last_login=now() WHERE username='$myusername'");

// Redirect good login attempt
  header("location:login_success.php");
  }

// Redirect bad login attempt
  else {
    header("location:login_retry.php");
    }
?>

Last edited by MVied; Aug 13th, 2008 at 8:36 pm.

MVied

Reputation Points: 21

Solved Threads: 11

Junior Poster

Offline

111 posts
since Aug 2008

Permalink

Aug 13th, 2008

Re: Echo MySQL Row Data

Not a problem, I've just heard horror stories about php 4.2 when developers had to go back through the scripts that they wrote in the past because register globals was turned off. The less of that we have in the future the better off we'll be.

Yes, that would be the best way to go.

R0bb0b

Reputation Points: 358

Solved Threads: 89

Posting Shark

Offline

986 posts
since Jun 2008

Permalink

Aug 13th, 2008

Re: Echo MySQL Row Data

Thank you for the replies. I will have to continue this Friday or next Monday due to other web obligations.

With regard to the php version, we are self-hosting. I can reconfigure Apache if need be, but what I'm doing works--and if it aint broke, don't fix it! Right?

One more thing: I have to try out the code you both provided to see how it goes, but if I want to echo the company name on any page while the session is active, what do I need to do?

Thank you again for helping me here. I'll return the favor as often as I can.

GP

gpdrums

Reputation Points: 10

Solved Threads: 0

Light Poster

Offline

36 posts
since Sep 2007

Permalink

Aug 14th, 2008

Re: Echo MySQL Row Data

Update: This worked. Thank you for the help. FYI, here's what I did to echo the company name on the appropriate pages:

(Toggle Plain Text)

<?php
if (!session_register(company));
{
echo $_SESSION['company'];
}
?>

gpdrums

Reputation Points: 10

Solved Threads: 0

Light Poster

Offline

36 posts
since Sep 2007

Permalink

Aug 15th, 2008

Re: Echo MySQL Row Data

Click to Expand / Collapse Quote originally posted by gpdrums ...

Update: This worked. Thank you for the help. FYI, here's what I did to echo the company name on the appropriate pages:
(Toggle Plain Text)
<?php
if (!session_register(company));
{
echo $_SESSION['company'];
}
?>
<?php if (!session_register(company)); { echo $_SESSION['company']; } ?>

Well if you shouldn't use session_register, maybe you should use this:

PHP Syntax (Toggle Plain Text)
if ($_SESSION['company']) {
 echo $_SESSION['company'];
}
if ($_SESSION['company']) {
 echo $_SESSION['company'];
}

MVied

Reputation Points: 21

Solved Threads: 11

Junior Poster

Offline

111 posts
since Aug 2008

Permalink

Aug 15th, 2008

Re: Echo MySQL Row Data

Click to Expand / Collapse Quote originally posted by MVied ...

Well if you shouldn't use session_register, maybe you should use this:
PHP Syntax (Toggle Plain Text)
if ($_SESSION['company']) {
 echo $_SESSION['company'];
}
if ($_SESSION['company']) { echo $_SESSION['company']; }

I usually go a step further and do this:

php Syntax (Toggle Plain Text)
if (isset($_SESSION['company']) && trim($_SESSION['company']) != "") {
 echo $_SESSION['company'];
}
if (isset($_SESSION['company']) && trim($_SESSION['company']) != "") {
 echo $_SESSION['company'];
}

which will also ensure that it is not blank

R0bb0b

Reputation Points: 358

Solved Threads: 89

Posting Shark

Offline

986 posts
since Jun 2008

Permalink

Aug 15th, 2008

Re: Echo MySQL Row Data

As I continued to play with the code, I added "Welcome, " to the echo() statement. I noticed that if the person was not logged in, "Welcome," printed without the company name. What type of else statement will keep this from happening?

gpdrums

Reputation Points: 10

Solved Threads: 0

Light Poster

Offline

36 posts
since Sep 2007

Page 1
2
Next

This thread is solved

Either the thread starter or a moderator has marked this thread as solved. You can most likely trust the responses and answers given. There is most likely no reason for any further responses to be posted here. If you have a related question, please start a new thread in this forum instead.

This thread is more than three months old

No one has posted to this discussion for at least three months. Please let old threads die and do not reply to them unless you feel you have something new and valuable to contribute that absolutely must be added to make the discussion complete. Otherwise, please start a new thread in this forum instead.

Previous Thread in PHP Forum Timeline: Free 100GB cPanel Reseller for anyone who manages to integrate WHMCS for me!

Next Thread in PHP Forum Timeline: How to swap two rows of a table in a database using php

DaniWeb Message

Cancel Changes

User Name
Password