no value when trying to insert record and retrieve ID

[chumlyumly]

Hi -
I'm working with
PHP5
MySQL
Mac OSX

I've developed two pages where a user can input his/her info, which goes to a MySQL database. The first page is supposed to pass the newly created 'member_id' (which is an auto-increment field in the 'members' table) to the second page, where I have records going into another table that uses 'member_id' as a foreign key.

I've downloaded and used the Dreamweaver Server Behaviour "insert-retrieve ID," which creates a session variable (I've named it 'MM_id') equal to 'mysql_insert_i d()'.

The problem is, it's not passing this variable to the next page. Am I missing something? Do I need to include a 'session_start( )' somewhere?

Here's the pertinent code for the first page:

<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  $theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
 
  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
 
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
}
 
// DW Team Insert and Retrieve ID
if ((isset($HTTP_POST_VARS["MM_insert"])) && ($HTTP_POST_VARS["MM_insert"] == "memberinfo")) {
  $insertSQL = sprintf("INSERT INTO member (firstname, lastname, member_no, password, membertype, businessname, street, city, `state`, country, zip, bphone, bfax, mobilephone, email, website, directory_publish, initials, comment, firm_est, firm_size, firm_contact, firm_no_arch, firm_certified, firm_projects, council_district, prof_orgs, currently_serving, curr_serving_detail, interest_serving, interest_serving_detail, media_contact, faculty, sponsor_opps, home_tour, event_locale) VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['mbr_fname'], "text"),
                       GetSQLValueString($_POST['mbr_lname'], "text"),
                       GetSQLValueString($_POST['memberno'], "int"),
                       GetSQLValueString($_POST['password1'], "text"),
                       GetSQLValueString($_POST['mbr_type'], "int"),
                       GetSQLValueString($_POST['mbr_firmname'], "text"),
                       GetSQLValueString($_POST['mbr_busaddress'], "text"),
                       GetSQLValueString($_POST['mbr_city'], "text"),
                       GetSQLValueString($_POST['mbr_state'], "text"),
                       GetSQLValueString($_POST['country'], "text"),
                       GetSQLValueString($_POST['mbr_zip'], "text"),
                       GetSQLValueString($_POST['mbr_phone'], "text"),
                       GetSQLValueString($_POST['mbr_fax'], "text"),
                       GetSQLValueString($_POST['mbr_mobile'], "text"),
                       GetSQLValueString($_POST['email'], "text"),
                       GetSQLValueString($_POST['mbr_url'], "text"),
                       GetSQLValueString(isset($_POST['directory_publish']) ? "true" : "", "defined","'Y'","'N'"),
                       GetSQLValueString($_POST['initials'], "text"),
                       GetSQLValueString($_POST['comment'], "text"),
                       GetSQLValueString($_POST['firm_est'], "text"),
                       GetSQLValueString($_POST['firm_size'], "int"),
                       GetSQLValueString($_POST['firm_contact'], "text"),
                       GetSQLValueString($_POST['firm_no_arch'], "int"),
                       GetSQLValueString($_POST['firm_certified'], "text"),
                       GetSQLValueString($_POST['firm_projects'], "text"),
                       GetSQLValueString($_POST['council_district'], "text"),
                       GetSQLValueString($_POST['prof_orgs'], "text"),
                       GetSQLValueString($_POST['currently_serving'], "text"),
                       GetSQLValueString($_POST['curr_serving_detail'], "text"),
                       GetSQLValueString($_POST['interest_serving'], "text"),
                       GetSQLValueString($_POST['interest_serving_detail'], "text"),
                       GetSQLValueString($_POST['media_contact'], "text"),
                       GetSQLValueString($_POST['faculty'], "text"),
                       GetSQLValueString($_POST['sponsor_opps'], "text"),
                       GetSQLValueString($_POST['home_tour'], "text"),
                       GetSQLValueString($_POST['event_locale'], "text"));
 
  mysql_select_db($database_connection, $connection);
  $Result1 = mysql_query($insertSQL, $connection) or die(mysql_error());
  $_SESSION["MM_id"] = mysql_insert_id();
  $insertGoTo = "insert_specialty2.php";
  if (isset($HTTP_SERVER_VARS['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $HTTP_SERVER_VARS['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}
 
$colname_rs_member = "-1";
if (isset($_GET['recordID'])) {
  $colname_rs_member = (get_magic_quotes_gpc()) ? $_GET['recordID'] : addslashes($_GET['recordID']);
}
mysql_select_db($database_connection, $connection);
$query_rs_member = sprintf("SELECT * FROM member WHERE member_id = %s", $colname_rs_member);
$rs_member = mysql_query($query_rs_member, $connection) or die(mysql_error());
$row_rs_member = mysql_fetch_assoc($rs_member);
$totalRows_rs_member = mysql_num_rows($rs_member);
?>
 

Any help is GREATLY appreciated...

Charity

[mwasif]

You must have to use session_start() whenever you need to manipulate session variables. Put this on the top of the before, make sure there should not be any sort of output.

[chumlyumly]

You must have to use session_start() whenever you need to manipulate session variables. Put this on the top of the before, make sure there should not be any sort of output.

Thank you! Could you please tell me exactly where in my code the 'session_start( )' would go? I've put it in there before - first, at the top of the code, and I tried another time to put it right before the session variable, and it still didn't work - the page just took a really long time to load.

Thanks again.

Charity

[Atli]

Hi.

The session_start() function should be put at the top of the page, or at least before any output.

Also, I see you use $HTTP_POST_VARS and $HTTP_SERVER_VA RS in some places. Although they are still available in PHP5 they are deprecated and you should avoid using them. Use the $_POST and $_SERVER superglobals instead, as you do most of the time.

[chumlyumly]

Thank you for your reply. I've changed the old code to the new - thanks for noticing!

I've been fiddling with it all night, to no avail. I've added the session_start() to the top, I've added session_name(), session_registe r() - with variables - and nothing.

What happens is when I submit the first page to go to the second (and hopefully pass the session variable) one of two things happens.

Either

1 - the page takes a VERY long time to load, and when it does, it's blank; or,
2 - the second page loads, but when I submit it, it says that the 'member_id' field is null. Also, just for testing, I've added dynamic text to the page that's supposed to contain the Session Variable - it's blank space.

The code for the first page is the same, except that I now have this at the top:

<?php require_once('../Connections/connection.php'); ?>
<?php session_start(); 
 
// *** Redirect if username exists
$MM_flag="MM_insert";
if (isset($_POST[$MM_flag])) {
  $MM_dupKeyRedirect="username_in_use.htm";
  $loginUsername = $_POST['memberno'];
  $LoginRS__query = "SELECT member_no FROM member WHERE member_no='" . $loginUsername . "'";
  mysql_select_db($database_connection, $connection);
  $LoginRS=mysql_query($LoginRS__query, $connection) or die(mysql_error());
  $loginFoundUser = mysql_num_rows($LoginRS);
 
  //if there is a row in the database, the username was found - can not add the requested username
  if($loginFoundUser){
    $MM_qsChar = "?";
    //append the username to the redirect page
    if (substr_count($MM_dupKeyRedirect,"?") >=1) $MM_qsChar = "&";
    $MM_dupKeyRedirect = $MM_dupKeyRedirect . $MM_qsChar ."requsername=".$loginUsername;
    header ("Location: $MM_dupKeyRedirect");
    exit;
  }
}
?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
 

etc.

The second page's code looks like this:

<?php require_once('../Connections/connection.php'); ?>
<?php session_start(); ?>
<?php require_once('../Connections/connection.php'); ?>
<?php
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
{
  $theValue = (!get_magic_quotes_gpc()) ? addslashes($theValue) : $theValue;
 
  switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;    
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
  }
  return $theValue;
}
 
 
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
  $editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
 
}
 
@reset($specialty);
mysql_select_db($database_connection, $connection);
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "memberinfo"));
while (list($key, $val) = @each ($specialty)) {
  $insertSQL = sprintf("INSERT INTO specialty_group (specialty, member_id) VALUES (%s,%s)",
                       GetSQLValueString($val, "text"),
                       GetSQLValueString($_POST['hiddenID'], "int"));
 
  mysql_select_db($database_connection, $connection);
  $Result1 = mysql_query($insertSQL, $connection) or die(mysql_error());
 
$insertGoTo = "update_complete.php";
  if (isset($_SERVER['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $_SERVER['QUERY_STRING'];
  }
  header(sprintf("Location: %s", $insertGoTo));
}
 
$colname_rsspecialty = "-1";
if (isset($_SESSION['MM_id'])) {
  $colname_rsspecialty = (get_magic_quotes_gpc()) ? $_SESSION['MM_id'] : addslashes($_SESSION['MM_id']);
}
mysql_select_db($database_connection, $connection);
$query_rsspecialty = sprintf("SELECT * FROM specialty_group WHERE member_id = %s", $colname_rsspecialty);
$rsspecialty = mysql_query($query_rsspecialty, $connection) or die(mysql_error());
$row_rsspecialty = mysql_fetch_assoc($rsspecialty);
$totalRows_rsspecialty = mysql_num_rows($rsspecialty);
?>
 

Is this more of a help?

Thanks again - the help is so appreciated!

Charity