Skip to main content
M
marcobraynio
Participating Frequently
December 7, 2010
Answered

Post a session variable to a shopping cart table.

  • December 7, 2010
  • 5 replies
  • 1066 views

I am trying to post a session variable generated from a login page to to a shopping cart so that I can then filter the contents of the cart by user.  The cart is a table in a MYSQL/PHP database.

I have very little experience in php/mysql so I am probably doing some thing fundamentally wrong.

  1. At present, a user has to login before adding a product to the cart - this has been set up in the behaviours panel.
  2. A form has been set up on my product page so that when the "buy" button is clicked, the product_id, quantity of the item etc is inserted into the shopping cart table.
  3. I have tried to use the bindings panel to additionally add the username which I beleieve has been set up as a session variable from the login page and have included it in a hidden field on the form but when I look at the table in phpMyAdmin the following appears in my session variabe column:
  4. <br /> <b>Notice</b>: Undefined variable: _SESSION in <b>C:\wamp\www\boutique_wines\wine.php</b> on line <b>114</b><br />
  5. Line 114 reads as follows:  <input name="username" type="hidden" id="username" value="<?php echo $_SESSION['MM_Username']; ?>" />

Please help

Mark

This topic has been closed for replies.
Correct answer

Mark,

Basically you're saying this: My car won't start. I want it to start but when I put the key in all I see is a check engine light. Please help.

It makes it difficult to help if you don't show us what's under the hood.

I assume the session is not started on the page, resulting in the error message of an undefined variable. Also it's not a good idea to insert dynamic info into a hidden field if you're just using the hidden field to insert the info into a database. Form fields can be hacked. What's to stop someone from visiting your page, copying your form source, altering the hidden field value, uploading the altered form to their server, and submitting the altered form to your processing script? Bypass the hidden field method and simply insert the username session variable directly into the database through a query to avoid input field manipulation.

5 replies

A
Anonymous
Correct answer
December 7, 2010

Mark,

Basically you're saying this: My car won't start. I want it to start but when I put the key in all I see is a check engine light. Please help.

It makes it difficult to help if you don't show us what's under the hood.

I assume the session is not started on the page, resulting in the error message of an undefined variable. Also it's not a good idea to insert dynamic info into a hidden field if you're just using the hidden field to insert the info into a database. Form fields can be hacked. What's to stop someone from visiting your page, copying your form source, altering the hidden field value, uploading the altered form to their server, and submitting the altered form to your processing script? Bypass the hidden field method and simply insert the username session variable directly into the database through a query to avoid input field manipulation.

M
marcobraynioAuthor
Participating Frequently
December 7, 2010

shocker

Thanks for your reply, apologies if there isn't enough information on there, let me know what else you need and I'll supply it.  I'm really very new to this kind of stuff.

Do I need to start the session on every page then?

How do I input directly with a query?

Thanks

Mark

A
Anonymous
December 7, 2010

Do I need to start the session on every page then?

Yes you need to start the session on every page that calls a session variable. Do this by adding this to the very first line of your .php page that uses session variables in the page:

How do I input directly with a query?

Input directly into a query by using a code like the following example that is inserting the logged in users username and IP address into table_name

if (isset($_SESSION["MM_username"])) {
  $insertSQL = sprintf("INSERT INTO table_name (user_name, ip_address) VALUES (%s, %s)",
  GetSQLValueString($_SESSION['MM_username'], "text"),
  GetSQLValueString($_SERVER['REMOTE_ADDR'], "text"));
}
Firefly Community Gallery
Adobe Firefly

Remix with Firefly Community Gallery

Thousands of free creations to fall in love with and remix in Firefly.

Explore now
Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices