Sessions Question..

[Tim Mousel]

Hello,

I'm trying to pass session variables from signup2.cgi to profile_post.cgi

Here is the relevant part of signup2.cgi:

#!/usr/bin/php4
<?
//if a session does not yet exist for this user, start one
session_start();
if (!$PHPSESSID) {
    session_register('username');
    session_register('pass');
    session_register('email');
    session_register('gender');
    session_register('gender2');
} else if ((!$username) || (!$pass) || (!$email) || (!$gender) || (!$gender2)) {
    session_register('username');
    session_register('pass');
    session_register('email');
    session_register('gender');
    session_register('gender2');
}
include ("/home/info/functions.php");


 //Check to see if the username is already in the database.
    $sql = mysql_query("SELECT * FROM $table_name WHERE (username='$username')"); 
    if (mysql_num_rows($sql) > 0) {
    include ("/home/cyberda/info/body.inc");
        BodyHeader("User Name Taken !"); 
        ?>
  </font>
<P> 
  <center>
    <font face="Verdana, Arial, Helvetica, sans-serif" size="2">We are sorry to 
    inform you that the User Name <B> 
    <? echo $username ?>
    </B> is already taken. Please hit the back button in your browser and try 
    again. </font> 
  </center>
  <font face="Verdana, Arial, Helvetica, sans-serif" size="2"> 
  <? 
        BodyFooter(); 
        exit;
    } 
   

    else {
    
//Check to see if a valid email address has been entered.
$email = strtolower(trim($email)); 
if (is_valid_email($email)) { 

$email = "$email";
} else {
include ("/home/cyberda/info/body.inc");
BodyHeader("Bad Email Address");
echo "You've entered a bad email address.";
BodyFooter(); 
exit;
}


//Insert info into database after all data was checked and verified.
$active = "n";

$sql = "INSERT INTO $table_name
    SET active='$active',username='".addslashes($username)."',pass='".addslashes($pass)."',email='".addslashes($email)."', gender='$gender',gender2='$gender2'
    ";

$result = @mysql_query($sql,$connection)
    or die("Couldn't execute query.");
    

include ("/home/cyberda/info/body.inc");
BodyHeader("CyberDaters.com");
?>
  </font>
<p><font face="Verdana, Arial, Helvetica, sans-serif" size="2">Welcome 
  <? echo "$username"; ?>
  ! </font></p>
<P><font face="Verdana, Arial, Helvetica, sans-serif" size="2"> To gain access 
  to the <B>FREE</B> Members Area you'll need to submit your profile by clicking 
  the Continue button below: </font> 
<form name="form1" method="post" action="profile_post.cgi?<?=SID?>">
 <center> <input type="image" border="0" name="submit" src="http://cyberdaters.com/images/continue.gif" width="100" height="56" alt="Continue"></center>


</form>
<?
BodyFooter(); 
}
?>

To carry the username and password through the next 3 registration pages, do I need to put the following at the top of each page?

session_start();
if (!$PHPSESSID) {
    session_register('username');
    session_register('pass');
    session_register('email');
    session_register('gender');
    session_register('gender2');
} else if ((!$username) || (!$pass) || (!$email) || (!$gender) || (!$gender2)) {
    session_register('username');
    session_register('pass');
    session_register('email');
    session_register('gender');
    session_register('gender2');
} 

Whether or not I insert that into profile_post.cgi I can't get the info to pass from form to form. Is it a problem with signup2.cgi since it prints out the page that has the "continue" button it...do the variables get lost somewhere between?

Here is where I'm testing this out:

http://cyberdaters.com/signup.cgi?

Thanks,

Tim