Session issue?

[rexhvn]

Hey everyone,

I seem to be having a session issue and hoping someone could assist me.

I have just finished creating a login form etc an everything seems to be working fine, the only issue i'm having is after the user has logged in, it won't display the username name ie: 'Welcome user'... As per code below, it will only display 'Welcome Guest' so it seems to me that $_SESSION is not working correctly....

This is the code for the verifying details etc

<?php

$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="realestate"; // Database name
$tbl_name="registration"; // Table name

// Connect to server and select databse.
$db=mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name", $db)or die("cannot select DB");

// username and password sent from form
global $myusername;
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql= ("SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'");
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){

// Register $myusername, $mypassword and redirect to file "login_success.php"
$_SESSION['myusername'];
$_SESSION['mypassword'];
header("location:../login/adproperties success.php");
}
else {
header("refresh: 1; URL=../login/adproperties fail.php");
}

?>

And this is the welcome message code

<?php
session_start();
if(isset($_SESSION['myusername']))
{
echo 'Welcome , ', $_SESSION['myusername'];
}
else
{
	echo 'Welcome Guest!';
}

?>

I get no error/syntax messages... any idea what could be the issue?

Thanks

[Redcoder]

Have a session_start() at the top of the login page too - and in general every page where you'll ever need to get, manipulate or destroy session variables - and asign $username to $)SESSION['myusername'].

PHP Code:

<?php

session_start();

$host="localhost"; // Host name
$username="root"; // Mysql username
$password=""; // Mysql password
$db_name="realestate"; // Database name
$tbl_name="registration"; // Table name

// Connect to server and select databse.
$db=mysql_connect("$host", "$username", "$password")or die("cannot connect");
mysql_select_db("$db_name", $db)or die("cannot select DB");

// username and password sent from form
global $myusername;
$myusername=$_POST['myusername'];
$mypassword=$_POST['mypassword'];

// To protect MySQL injection (more detail about MySQL injection)
$myusername = stripslashes($myusername);
$mypassword = stripslashes($mypassword);
$myusername = mysql_real_escape_string($myusername);
$mypassword = mysql_real_escape_string($mypassword);

$sql= ("SELECT * FROM $tbl_name WHERE username='$myusername' and password='$mypassword'");
$result=mysql_query($sql);

// Mysql_num_row is counting table row
$count=mysql_num_rows($result);

// If result matched $myusername and $mypassword, table row must be 1 row

if($count==1){

// Register $myusername, $mypassword and redirect to file "login_success.php"
$_SESSION['myusername'] = $myusername;
$_SESSION['mypassword'] = $mypassword;
header("location:../login/adproperties success.php");
}
else {
header("refresh: 1; URL=../login/adproperties fail.php");
}

?>

[rexhvn]

Works great, thank you so much.

[paulinetaylor85]

If we want to add the specific validation like the people only from particular areas, then which code will we use?

[Redcoder]

People from specific areas? You mean like Geo-targeting?