I am in the process of implementing a login panel on my index page. The login data will be sent via an ajax call. Upon successful verification of the username and password, I am storing the user data in a session and then reloading the index page upon ajax success. I have ensured that the config file is included on all pages where the session_start() method is written to ensure availability throughout. Additionally, I have confirmed that session support is enabled by checking phpinfo. Despite setting values in the session on the ajax PHP page, after the index page reloads, the session array appears to be empty.
Any assistance or guidance on resolving this issue would be greatly appreciated.
This excerpt is taken from my config.php file
<?php
session_start();
$mysql_host = "****";
$mysql_user = "****";
$mysql_password = "****";
$mysql_db = "****";
$link = mysql_connect($mysql_host,$mysql_user,$mysql_password) or die('');
mysql_select_db("$mysql_db")or die("cannot select DB");
include 'includes/user_model.php';
$fgmembersite = new FGMembersite();
$fgmembersite->InitDB($mysql_host,$mysql_user,$mysql_password,$mysql_db);
?>
The user_model.php handles the database checking and session setup.
function Login()
{
if(empty($_POST['Email']))
{
$this->HandleError("UserName is empty!");
return false;
}
if(empty($_POST['password']))
{
$this->HandleError("Password is empty!");
return false;
}
$username = trim($_POST['Email']);
$password = trim($_POST['password']);
// if(!isset($_SESSION)){ session_start(); }
if(!$this->CheckLoginInDB($username,$password))
{
return false;
}
$_SESSION[$this->GetLoginSessionVar()] = $username;
return true;
}
function CheckLoginInDB($username,$password)
{
$this->tablename='users';
if(!$this->DBLogin())
{
$this->HandleError("Database login failed!");
return false;
}
$username = $this->SanitizeForSQL($username);
$pwdmd5 = md5($password);
$qry = "Select * from $this->tablename where username='$username' OR email = '$username' and password='$pwdmd5' and active_status=1";
$result = mysql_query($qry,$this->connection);
if(!$result || mysql_num_rows($result) <= 0)
{
$this->HandleError("Error logging in. The username or password does not match");
return false;
}
$row = mysql_fetch_assoc($result);
$_SESSION['name_of_user'] = $row['first_name'].' '.$row['last_name'];
$_SESSION['email_of_user'] = $row['email'];
$_SESSION['user_id'] = $row['user_id'];
$_SESSION['type_id'] = $row['type_id'];
return true;
}
ajax.php
<?php
include 'includes/config.php';
if(isset($_POST['Email'])) {
if($fgmembersite->Login()) {
echo 1;
}
else {
echo $fgmembersite->error_message;
}
}
In Index.php, I am utilizing jQuery to submit the login form:
<script> $(document).ready(function()
{
$("button#login").click(function()
{$("#ErrorMessages").hide();
$("#ErrorMessages").html("");
var username = $("#username").val();
var pwd = $("#password").val();
if(username =='' || pwd == '')
$("#ErrorMessages").show();
$("#ErrorMessages").html("Invalid Username or Password");
$.ajax({ type: "POST",
url: "loginChk.php",
data: $('form.login').serialize(),
success: function(msg)
{ if(msg == 1){
// $(location).attr('href','index.php');
location.reload();
}
else
{
$("#ErrorMessages").show();
$("#ErrorMessages").html(msg);
}},
error: function(){
$("#ErrorMessages").html(msg);
return false;}
});
return false; });});
</script>