Sessions help for a newbie?

[PHPClueless]

Hi! Thanks in advance to anyone who can answer this. I have a session variable (empcode) that isn't getting across.

A snippet from the first page where employees enter their username (empcode) and password (password), with HTML tags and other formatting removed:


<form action="employeeinformationmenu.php" name="leave" method="post" onSubmit="return validateForm(leave);">

Employee Number:
<input name="empcode" type="text" onSubmit="return validateForm(leave);"/>

Password:
<input name="password" type="password" / onSubmit="return validateForm(leave);">

<?php
session_register("empcode");
session_register("password");
?>

This part works great. They enter their employee number and password.

Page 2

At the top:


<?php
session_start();
$_SESSION['empcode'] = $_POST['empcode'];
$_SESSION['middle'] = $_POST['middle'];
$_SESSION['firstname'] = $_POST['firstname'];
$_SESSION['lastname'] = $_POST['lastname'];
$_SESSION['leavehours'] = $_POST['leavehours'];
$_SESSION['password'] = $_POST['password'];
header('Content-Type: image/jpeg');
?>

This works fine, as well. It pulls the info it's supposed to pull.

I want to take the username and password already *allegedly* in the session, and send them to the next page using:


<form action="paystubresults.php" name="paystubs" method="post">
<input type="submit"/ value="Paystubs">
</form>


Page 3

At the top:

<?php
session_start();
$empcode = $_SESSION['empcode'];
$middle = $_SESSION['middle'];
$firstname = $_SESSION['firstname'];
$lastname = $_SESSION['lastname'];
$leavehours = $_SESSION['leavehours'];
$password = $_SESSION['password'];
?>
<?php
echo '<pre>' . print_r($_SESSION,true) . '</pre>';
echo $password;
?>

The above echo statements give me:

Array
(
[empcode] =>
[password] => 123456789 (changed, was my real SSN)
[middle] =>
[firstname] =>
[lastname] =>
[leavehours] =>
)

123456789 (changed, was my real SSN)

So it carries the password over, but not the employee number (empcode).

Anybody?

[clancey]

session_register is a deprecated function.
When you initialize the session variable names on page 1 try:

$_SESSION[empcode'] = "";

and so forth.

When setting the variables on page 2, I would rewrite the code as follows;

if( isset( $_POST['empcode'])) { $_SESSION['empcode'] = $_POST['empcode']; }
else { echo "DEBUG: empcode not set"; }

These things may or may not cure the problem, but it may allow you to begin to narrow down the cause.

[PHPClueless]

session_register is a deprecated function.
When you initialize the session variable names on page 1 try:

$_SESSION[empcode'] = "";

and so forth.

When setting the variables on page 2, I would rewrite the code as follows;

if( isset( $_POST['empcode'])) { $_SESSION['empcode'] = $_POST['empcode']; }
else { echo "DEBUG: empcode not set"; }

These things may or may not cure the problem, but it may allow you to begin to narrow down the cause.

Thanks. Your code gives me:

DEBUG: empcode not set

The only problem is, why is it not being set while password is?

[krakjoe]

Well, its never a grt idea to leave passwords inside the session var, but if it's necessary, I'd do it like this, I assume page one posts to page two, on page two I'd use


foreach ($_POST as $k => $x)
{
if($key != "password" || $key != "whatever")
{
$_SESSION['$k'] = $x;
}
}


also on page three instead of that blah = _session['blah'] nonsense, try to access the _session var directly.

I dunno if that's any help

[PHPClueless]

also on page three instead of that blah = _session['blah'] nonsense, try to access the _session var directly.


Do you mean like this?

WHERE M2.[EMPNO] = $empcode and
M2.[MSSNO] = $password

That crashes the query.

Or is my syntax wrong?

[clancey]

I am sorry it has taken me so long to rejoin this thread. I need to back up because your problem getting the value for empcode is not yet solved.

When you run the script and it says: "DEBUG: empcode not set" -- this means that the value for empcode is not being passed from the form.

From your form I guess you are running some kind of javascript to validate the form input or it is being run through yet another script. But, I cannot understand why you need to include the statement "onSubmit="return validateForm(leave);" with each of the form's input elements. Would this not be saved for a submit button? Is that in your actual page 1 code?

In my forms, I validate user input in the PHP script and redisplay the form when there is an error, indicating where the problems are. This is likely more a question of taste, though it solves the problem of javascript being turned off.

If you need to include that in each input element, why does it refer to the name of the form instead of the name of element?

For clarity sake, you should put a space before the "/>" part of the input element and you should move the closing slash in the password part to the end.

I suspect the value for empcode is being removed by the validateFrom function.