GuestBook help

[phalbachjr]

I am trying to modify Guestbook.  In order to access the page, the user must log in using a screen name and email address that has been registered with the website. 

 

What I want to take the log in information and automatically populate the Name and email field of the input comment form.  I have set up SESSION Variables (see below for the login php).

 

<?php

 

session_start();

 

require_once("dbcon.php");

 

$form = "<table>

            <form action='login.php' method='post'>

            <tr>

                <td>Username: </td><td><input type='text' name='user' size='20' />

            </tr>

            <tr>

                <td>Email: </td><td><input type='text' name='emad' size='30' />

            </tr>

            <tr>

                <td><input type='submit' name='submit' value='Login' />

<td><a href='New Contact.html'>New Account </a>

            </tr>

            </form>

        </table>"; // Do NOT use \" when you still have the option to use singlequotes, looks so messy...

 

$user = $_POST['user'];

$emad = $_POST['emad']; //defining these in the start makes the source looks nicer

   

if(!$_POST['submit']) die($form); // just kill the rest of the script if the form isn't submitted.

if(!$user || !$emad) die("Required fields missing<br /><br /> $form"); // killing the rest of the script and echoing the form and error

   

    $sql = "SELECT ident FROM Mix WHERE password = '$pass' AND username = '$user'"; // just like with the variables and prints/echoes, you don't need to ".$var." anything with double quotemarks

    $res = mysql_query($sql) or die(mysql_error());

    if(mysql_num_rows($res) > 0) {

        $row = mysql_fetch_assoc($res);

$_SESSION['uid'] = $row['id'];

$_SESSION['un'] = $_POST['user'];  //Setup user name into session variable.

$_SESSION['ua'] = $_POST['emad'];  //Setup email address into session variable.

echo "You have been logged in as $user at $emad. Click <a href=\"gbook.php\">here</a> to the member page.";

    } else {

        echo "That username/password combination doesn't exist!<br /><br/> $form";

    }

 

?>

 

 

 

Below is a copy of the Sign Form. php.  I am trying to populate teh Name and email fields but the SESSION variables don't show up.  Can someone figure out what I AM DOING WRONG.

 

<?php session_start ();

$un = $_SESSION['un'];

$ua = $_SESSION['ua'];

?>

 

 

<div id="gbook_guestbook" align="center">

<span class="gbook_guestbook"><?php echo $lang['t48']; ?></span><br class="clear" />

<span class="gbook_required"><?php echo $lang['t49']; ?></span>

</div>

 

<form action="gbook.php" method="post">

<!--SIGN FORM -->

<div id="gbook_entries">

 

<?php

    if ($error)

    {

echo '<div class="gbook_sign_error">'.$error.'</div>';

    }

?>

 

<div class="gbook_left"><span class="gbook_entries"><b><?php echo $lang['t50']; ?></b></span></div>

<div class="gbook_right"><input type="hidden" name="<?php echo $myfield['name']; ?>" value="<?php echo $un; ?>" /></div> <?php echo $un; ?>

 

<div class="clear"></div>

 

<div class="gbook_left"><span class="gbook_entries"><?php echo $lang['t51']; ?></span></div>

<div class="gbook_right"><input type="text" name="from" value="<?php echo $from; ?>" size="45" /></div>

 

<div class="clear"></div>

 

<?php

if ($settings['use_url'])

{

?>

<div class="gbook_left"><span class="gbook_entries"><?php echo $lang['t53']; ?></span></div>

<div class="gbook_right"><input type="text" name="url" value="<?php echo $url; ?>" size="45" maxlength="80" /></div>

 

<div class="clear"></div>

    <?php

}

?>

 

<div class="gbook_left"><span class="gbook_entries"><?php echo $lang['t52']; ?></span></div>

<div class="gbook_right"><input type="hidden" name="email" value="<?php echo $ua; ?>" /> <?php echo $ua; ?>

    <?php

    if ($settings['hide_emails'])

    {

?>

<br class="clear" /><span class="gbook_entries"><i><?php echo $lang['t66']; ?></i></span>

    <?php

    }

    ?>

    </div>

 

<div class="clear"></div>

 

<div class="gbook_left"><span class="gbook_entries"><b><?php echo $lang['t16']; ?></b></span></div>

<div class="gbook_right"><span class="gbook_entries"><i><?php echo $lang['t54']; ?></i></span></div>

 

<textarea name="<?php echo $myfield['cmnt']; ?>" rows="12" cols="57" id="cmnt"><?php echo $comments; ?></textarea>

 

<!--BOTTOM IMAGES -->

<div id="gbook_bottom_images" class="gbook_bottom_images">

 

<a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/bigsmile.gif"  alt="" title="" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' :!cool: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/cool.gif"  alt=":!cool:" title=":!cool:" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' :!cry: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/crying.gif"  alt=":!cry:" title=":!cry:" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' :!devil: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/devil.gif"  alt=":!devil:" title=":!devil:" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/smile.gif"  alt="" title="" width="19" height="19" /></a> 

    <a href="#" onclick="document.getElementById('cmnt').value += ' :!mad: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/mad.gif"  alt=":!mad:" title=":!mad:" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' :!thinking: ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/thinking.gif"  alt=":!thinking:" title=":!thinking:" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/tongueout.gif"  alt="" title="" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/wink.gif"  alt="" title="" width="19" height="19" /></a> 

<a href="#" onclick="document.getElementById('cmnt').value += ' ';return false;"><img src="<?php echo $settings['tpl_path']; ?>images/emoticons/blush.gif"  alt="" title="" width="19" height="19" /></a> 

 

<a href="javascript:openSmiley()" class="gbook_submitted"><?php echo $lang['t26']; ?></a><br />

<label><input type="checkbox" name="nosmileys" value="Y" class="gbook_checkbox" <?php echo $nosmileys; ?> /><span class="gbook_entries"><?php echo $lang['t28']; ?></span></label><br class="clear" />

 

    <?php

    /* Private mesasges */

    if ($settings['use_private'])

    {

    ?>

<label><input type="checkbox" name="private" value="Y" class="gbook_checkbox" <?php echo $isprivate; ?> /><span class="gbook_entries"><?php echo $lang['t55']; ?></span></label><br class="clear" />

    <?php

    }

 

    /* Print anti-SPAM features */

    echo $settings['antispam'];

    ?>

</div>

<!--BOTTOM IMAGES END -->

 

<div align="center">

 

<div class="clear"> </div>

 

<!--SPAM TRAPS -->

    <!-- DON'T DELETE THESE HIDDEN FIELDS AND COMMENTS, THEY HELP CATCH STUPID SPAMBOTS! -->

<input type="hidden" name="name" />

    <input type="hidden" name="<?php echo $myfield['bait']; ?>" />

    <!-- >

    <input type="text" name="comments" value="1" />

    < -->

    <!--SPAM TRAPS END-->

 

    <input type="hidden" name="a" value="add" />

<input type="submit" value="<?php echo $lang['t88']; ?>" class="submit" />

</div>

 

    <p> </p>

 

</div>

<!--SIGN FORM END -->

</form>