MDCode

You can't use session_start(); or header(); after any output is sent to the browser. This is why it may be considered best practice for stuff involving headers or processing. process_login.php is starting multiple sessions which is why you get that error.

You would get a lot more help if you posted the code here instead of downloads

You haven't defined $cname anywhere before using it.

You said the form had already been submitted correctly. You can use Kevin's advice and header after the processing is done, but it won't be simultaneous and will have them leave your page. The only way to do two windows is JavaScript.

The only way I can think of that working is to use JavaScript on submit which will never be universal as the user can just disable it.

There is no redirect to a "thanks.htm" in that block which means either: 1. You're not showing everything. Or 2. You aren't explaining your issue clearly enough. Edit: You are however redirecting to contme.php, so why not just take that out?

If it is the image submit problem and not that link to google around your image, use if($_SERVER['REQUEST_METHOD'] === "POST") { } instead

Seeing as how you're wrapping it as a link... Not working isn't very specific as to what is not happening that should and what happens as it is now.

You're going to have to be much more specific. Is it an image? If so, just echo the path in an <img src=""> The second question...is not specific at all. What is Item supposed to be?

That means your database credentials are incorrect.

I don't think there's a mysql() function...I think there's only a mysqli class. I could be wrong. I think you're looking for mysql_connect

You're mixing mysql_ with mysqli_

According to your SQL file, there is no username column in that table, but you are selecting it in your query.

Edit: Editing my last post created a new post...? Ignore this one anyways

Are short tags on?

Just add a from header as an additional parameter to mail. "From:[email protected]\r\n"

Move the PHP code above the HTML...fix the syntax error being the extra semicolon, and realize you're using session register as a variable. Edit: And change the bit wise (&) to the operator symbolizing and (&&)

I would personally go with the one you're leaning towards. Image on top of text is too height-oriented and not enough width. The other design looks a bit childish for a business website.

You can not use header() after any output is sent to the browser i.e. HTML. Turn on error reporting while debugging.

There is no function called email(). Use mail()

Just a side note for the above, you should hash passwords instead of encrypting unless you have a VERY good reason not too, which is almost never.

What a great way to get help on a free help forum. I'd like to refer you to http://us1.php.net/session_start specifically this line:

Just set a get variable and if it's set then download using readfile()

XSS in forgot-password.php text field. XSS in register.php all text fields except password and captcha. It keeps saying re-enter my password and I am not giving out my location. Do you have a test account?

There's so much in-line CSS that everything will be cluttered. If they ever want to make another page they'll have to copy long lines of mostly CSS. Also, the order buttons are so far down, no one will want to scroll down that far just to order.