Session Hjælp

Du skal vel bare tildele brugeren en session id når han/hun logger ind. Når Han/Hun vil se noget i databasen slår den bare det id op i databasen

PHP kode 

 session_start();
 
 <?php
    if(isset($_POST['form_submit']))
    {
       $brugernavn = mysql_real_escape_string($_POST['form_brugernavn']);
       $password = mysql_real_escape_string($_POST['form_password']);
       $query = mysql_query("SELECT * FROM brugere WHERE brugernavn = '".$brugernavn."' AND password = '".$password."'");
       $row = mysql_fetch_assoc($query);
       
       if(mysql_num_rows($query) == 1)
       {
          $_SESSION['login'] = true;
          $_SESSION['id'] = $row['id'];
       }
    }
 
    if($_SESSION['login'] == true)
    {
       $query = mysql_query("SELECT * FROM brugere WHERE id = '".$_SESSION['id']."'");
       $row = mysql_fetch_assoc($query);
 
       echo "Navn: " . $row['navn'] . "<br />
             Telefon: " . $row['telefon'];
    }
 ?>

PHP kode 

 <?php require_once('Connections/DB.php'); ?>
 <?php
 if (!function_exists("GetSQLValueString")) {
 function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") 
 {
   $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
 
   $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);
 
   switch ($theType) {
     case "text":
       $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
       break;    
     case "long":
     case "int":
       $theValue = ($theValue != "") ? intval($theValue) : "NULL";
       break;
     case "double":
       $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";
       break;
     case "date":
       $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
       break;
     case "defined":
       $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
       break;
   }
   return $theValue;
 }
 }
 ?>
 <?php
 // *** Validate request to login to this site.
 if (!isset($_SESSION)) {
   session_start();
 }
 
 $loginFormAction = $_SERVER['PHP_SELF'];
 if (isset($_GET['accesscheck'])) {
   $_SESSION['PrevUrl'] = $_GET['accesscheck'];
 }
 
 if (isset($_POST['textfield'])) {
   $loginUsername=$_POST['textfield'];
   $password=$_POST['textfield2'];
   $MM_fldUserAuthorization = "";
   $MM_redirectLoginSuccess = "test1.php";
   $MM_redirectLoginFailed = "test1.php";
   $MM_redirecttoReferrer = false;
   mysql_select_db($database_DB, $DB);
   
   $LoginRS__query=sprintf("SELECT brugernavn, adgangskode FROM bruger WHERE brugernavn=%s AND adgangskode=%s",
     GetSQLValueString($loginUsername, "text"), GetSQLValueString($password, "text")); 
    
   $LoginRS = mysql_query($LoginRS__query, $DB) or die(mysql_error());
   $loginFoundUser = mysql_num_rows($LoginRS);
   if ($loginFoundUser) {
      $loginStrGroup = "";
     
     //declare two session variables and assign them
     $_SESSION['MM_Username'] = $loginUsername;
     $_SESSION['MM_UserGroup'] = $loginStrGroup;          
 
     if (isset($_SESSION['PrevUrl']) && false) {
       $MM_redirectLoginSuccess = $_SESSION['PrevUrl'];    
     }
     header("Location: " . $MM_redirectLoginSuccess );
   }
   else {
     header("Location: ". $MM_redirectLoginFailed );
   }
 }
 ?>